GDPR GDPR International Data Transfers 2

Question 1

Which GDPR article sets the general prohibition on transferring personal data to third countries?

Accepted Answer

Article 44

Answer

Article 44 establishes the general principle that any transfer of personal data to a third country or international organization may only take place subject to GDPR Chapter V conditions.

Question 2

A US-based cloud provider processes EU customer data. Which transfer tool would a US company most commonly use post-Privacy Shield?

Accepted Answer

SCCs (Standard Contractual Clauses)

Answer

Since Privacy Shield was invalidated, SCCs have become the primary mechanism US processors use to legally receive EU personal data.

Question 3

What is a Transfer Impact Assessment (TIA)?

Accepted Answer

An evaluation of whether the legal system of a destination country undermines the effectiveness of transfer safeguards

Answer

A TIA assesses the laws and practices of the destination country to determine whether they undermine the protections offered by the chosen transfer mechanism such as SCCs.

Question 4

Which country currently has a formal EU adequacy decision, making data transfers from the EU to that country permissible without additional safeguards?

Accepted Answer

Japan

Answer

Japan has an adequacy decision from the European Commission, meaning EU personal data can flow to Japan without requiring SCCs or BCRs.

Question 5

An organization wants to allow intra-group data transfers to subsidiaries in non-adequate countries. What is the most appropriate GDPR mechanism?

Accepted Answer

A single set of Binding Corporate Rules approved by the lead DPA

Answer

BCRs provide a single, internally binding framework for multinational corporate groups, avoiding the need for separate SCCs between every pair of group entities.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR GDPR International Data Transfers 2