The European Commission very recently presented two draft implementing decisions amending the existing adequacy decision on standard contractual clauses.
These drafts were presented to the Article 31 Committee, which is composed of Members State representatives who assist the European Commission concerning the protection of individuals with regard to the processing of personal data.
This presentation is a consequence of the Schrems ruling and past declarations of the Article 29 Working Party that standard contractual clauses remain under scrutiny.
The summary by the Article 31 Committee speaks for itself: “In Schrems, the Court invalidated Article 3 of the Safe Harbour adequacy decision because it found that the Commission exceeded its powers in imposing limitations on the powers of national supervisory authorities (DPAs) to suspend and prohibit data flows. Since a comparable provision restricting the powers of DPAs is present in the existing adequacy and SCCs decisions, the main objective of the proposed draft amending decisions is to remove any such restriction, thereby ensuring that the DPAs can use all the powers provided under EU and national law.”
The Article 31 Committee will make a final decision concerning these draft amendments in the coming days or weeks after reviewing the opinions of the Article 29 Working Party. It is possible that the Article 29 Working Party will propose other amendments.
For more information on international data transfers, please refer to the following prior Password Protected blog posts: