The European Commission has modernized the Standard Contractual Clauses (SCCs) to provide a legal mechanism for transferring personal data outside the EU/EEA. These updated SCCs address the requirements of the General Data Protection Regulation (GDPR) and offer greater flexibility for complex processing chains. Organizations must assess their data transfer mechanisms and update contracts to align with the new SCCs to ensure compliance.
CNIL outlines obligations for health professionals conducting internal research
CNIL reminds health establishments that internal research must follow data‑protection rules, including lawful bases, safeguards, and impact assessments.