ARTICLE · 06 FEBRUARY 2023

New Standard Contractual Clauses (SCC) And Data Transfers

Nordic Law

Explore more from Nordic Law

The European Commission adopted the new standard contractual clauses (SCCs) regarding transfers of personal data on 4.6.2021, and according to the transition period, they must be fully implemented by 27.12.2022 at the latest.

FinlandPrivacy

Max Atallah

The European Commission adopted the new standard contractual clauses (SCCs) regarding transfers of personal data on 4.6.2021, and according to the transition period, they must be fully implemented by 27.12.2022 at the latest.

The SCCs refer to standard agreements drawn up by the EU authorities, the aim of which is to provide different actors with an easy-to-use means of protecting personal data in international data transfers. In practice, SCCs are used in the same way as standard contracts in situations involving transfers of personal data from the EEA to third countries; the SCCs are therefore an agreement on the ways in which personal data must be protected in international data transfers.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

When Does Data Stop Being Personal Data?

Hannes Snellman

Significant Amendments To The Data Protection Act

Hannes Snellman

Snooping Of Personal Data: Who Is Responsible — Organisation Or Employee?

Hannes Snellman

An Overview Of The Data Act And The Implementation Process In Finland

Dottir Attorneys Ltd.

Drawing The Line Between Data And Information

Dottir Attorneys Ltd.

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Privacy
- Privacy Protection
- Data Protection

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

Data Protection Officer And Conflicts Of Interests

Data protection officer (DPO) monitors an organization's compliance with data protection requirements. DPO is a statutory position regulated in the EU's General Data Protection Regulation (GDPR).

GDPR Simplification – What Is Changing?

On 21 May 2025, the European Commission published a proposal for a regulation that would amend the General Data Protection Regulation ("GDPR").

Hannes Snellman

Significant Amendments To The Data Protection Act

The Government proposes that an administrative fine may also be imposed on public authorities and public administrative bodies for breaches of data protection legislation in order to make the system of sanctions more consistent across the public and private sectors.

Hannes Snellman

When Does Data Stop Being Personal Data?

Few questions in data protection law carry as much practical weight as this one: when does data stop being personal data? The answer determines whether the GDPR applies at all and with it, whether individuals hold rights of access; whether data can be shared with third parties or transferred outside the EU without GDPR safeguards; and what is permissible in AI development. In short, the boundary between personal data and non-personal data is the watershed of data protection law.

Hannes Snellman

The U.S. FTC Strengthens Regulation For Child-Directed Sites And Servcies

Amendments to the Children's Online Privacy Protection Rule, issued by the U.S. Federal Trade Commission on December 19th 2012, will tighten the privacy requirements for child-directed websites and mobile apps.

Agreements Define Data Sharing And Re-use

‘Data is the new oil' has been a popular phrase in recent years, but perhaps a more apt comparison would be solar power: a renewable natural resource that can benefit everyone at once, without diminishing.

Castrén & Snellman

EU–U.S. Data Transfers – What We Know Now

Many companies have been closely following the development of the interpretation practice concerning international data transfers ever since the Court of Justice of the European Union (the CJEU) ...

Castrén & Snellman

Data Protection Laws of the World Handbook: Second Edition - Finland

As part of the EU, Finland implemented the EU Data Protection Directive 95/46/EC with the Personal Data Act 523/1999.

DLA Piper Australia

Finland Introduces New Information Society Code

The Information Society Code (2014/917) (Code) – a new act in Finland on electronic communications, privacy, data security, communications, and the information society in general – took effect 1 January.

Reed Smith (Worldwide)

An Overview Of The Data Act And The Implementation Process In Finland

The EU Regulation on harmonised rules on fair access to and use of data (the "Data Act") is set to revolutionize the access and use of data in the European Union.

Dottir Attorneys Ltd.