The Data Protection Conference by the independent data protection authorities of Germany and the Federal States (DSK) has published an additional short paper (as no. 4) as guidance on data communication in third countries for the non-public sphere. The short paper addresses the possibilities listed in Articles 44–49 of the GDPR for ensuring lawful data transfer in countries outside of the EU /EEA.
For this short paper, a conditional – possibly divergent – future interpretation by the European Data Protection Board also applies.
It can be found on the pages of the independent data protection centre (Unabhängiges Datenschutzzentrum) of Saarland.
Rudi Kramer, BvD Board of Directors