Serious Privacy

SCCs Are Here But Far From Standard

June 08, 2021 Paul Breitbarth and K Royal of TrustArc Season 2 Episode 19
Serious Privacy
SCCs Are Here But Far From Standard
Show Notes

On this week's episode  of #SeriousPrivacy, Paul Breitbarth and K Royal discuss the new Standard Contractual Clauses (SCCs) for international transfers that were adopted by the European Commission on 4 June 2021. These model contracts, that come in four modules, finally replace the old SCCs, some of which date back to the early 2000s. The modernised versions are fully GDPR compliant, embrace the accountability principle and include many requirements to address the limitations set by the Schrems II decision.

Listen to the conversation to get a better understanding of what the new SCCs entail and how they can (and cannot) be used by organisations. You will hear more about why some non-European companies will not have to use SCCs going forward, but also on the assessments that you will need to undertake. 

Since recording the episode, the timelines for the Transfer SCCs have become clear too:
27 June 2021 - the new SCCs become applicable
27 Sept 2021 - the old SCCs become invalid for new contracts
27 Dec 2022 - all SCC-based contracts will need to be updated


As always, if you have any questions or comments, please feel free to contact us at In addition, if you like our podcast, please do rate and comment on our program in your favorite podcast app. 

If you have comments or questions, find us on LinkedIn and IG @seriousprivacy @podcastprivacy @euroPaulB @heartofprivacy and email Rate and Review us!

Proudly sponsored by TrustArc. Learn more about NymityAI at

#heartofprivacy #europaulb #seriousprivacy #privacy #dataprotection #cybersecuritylaw #CPO #DPO #CISO