The ADP Trust Bridge Channel – Data Transfer and Protection

In ADP From The Trust Bridge Channel, Publisher Channel by Casey Riley

Data Transfer and Protection with Alex Brown and Natasha Sheppard from Simmons and Simmons (International Law Firm)

Simmons and Simmons: data transfer risk assessment tool.

Following the  Schrems  II  case and related regulator guidance organizations  that are subject to the GDPR must conduct a comparative analysis and risk assessment  against a complex set of requirements for  most of their  international data  transfers.  In our digitally connected world, data transfers are the lifeblood of most companies and  therefore they need an effective solution to completing the required risk  assessments.

Ctrl_Transfer will do  much of  the hard work for you. Comprehensive, easy to understand country analysis is provided for a number of common importing countries.  A simple scoring methodology  allows  for  consistent and objective identification of key differences between jurisdictions, and  updates  to the  information  as things change will ensure that it  is accurate and up to date.

Analysis can be quickly imported into built-in risk assessment templates to quickly identify any  supplementary measures required.  A suite of additional templates  is  also included within the tool to assist with  things like  developing and documenting supplementary measures to make data transfers compliant.

Case Study: Facebook

Couple of weeks ago, Ireland’s High Court ruled against Facebook in a dispute over the company’s efforts to keep moving European data to the United States.

European Union and U.S. new data-transfer pact that would allow all firms — and not just Facebook— to move data between two of the world’s largest economic blocs.

Dublin court backed the regulator’s preliminary view that standard contractual clauses, or SCCs — widely used legal instruments — can’t be used to transfer data to the U.S. in light of the Schrems ruling that raised the bar for international data transfers.

SCCs could not compensate for the lack of protections in U.S. law for Europeans, the judge wrote, noting that Facebook did not appear to have put in place any extra safeguards.  Where do international transfers go next?

Other countries from Brazil to Russia to India are similarly pursuing legislation that would require local citizens’ data to be stored within their jurisdictions.

In recent months, there has been a growing chorus, most notably from U.S. President Joe Biden’s administration, to create a global pact that allows international data transfers to continue among countries that agree to baseline protections. The goal, in theory, is to uphold people’s privacy rights, while also allowing billions of euros worth of global trade to continue unimpeded.  Yet with EU-U.S. data transfers — both from Facebook and other companies — now in jeopardy, the pendulum is increasingly swinging toward keeping data closer to home.

 

 

Bios:

Alex Brown: Partner in the Information, Communications & Technology Group in Simmons & Simmons London Office. Advises on outsourcing and commercial ICT contracts for users and suppliers of ICT products and services.  Particular specialism in data protection and privacy.  Handles large scale, complex outsourcings (both IT and business process), software development, licensing and maintenance, telecoms supply and procurement contracts, major commercial contracts for the supply of goods and services.  Assists clients in a variety of industries on all aspects of privacy compliance

Natasha Sheppard: Associate at Simmons & Simmons Digital Business.  Specialising in Data Protection and has recently worked on advising around the Schrems 2 and new Standard Clause decisions surrounding Data Transfer.

Lee Curtis: Head of Global Sales at Simmons & Simmons.  Lee says that he “sell lawyers.” Leading a global team he works alongside partners and senior management to deliver a sustainable business strategy.  He spent 10 years in the international legal market (eight in Asia) and specializes in selling legal products.

Contact The Trust Bridge:

Websites: 

http://www.thetrustbridge.co.uk/

http://digitalarena.co/  Arena for Data Protection Professionals)

Online learning portal https://training.thetrustbridge.co.uk/