Remove 01
article thumbnail

CNIL publishes a draft TIA guide

Data Protection Report

The Commission recently made a partial adequacy decision for transfers to the US under the EU-US Data Privacy Framework ( DPF ), meaning that a TIA is not required for transfers to recipients who have self-certified under the DPF. Use of the guide is not obligatory, and other methodologies can be applied when conducting TIAs. [17]

GDPR 75