A Checklist for Performing a Transfer Impact Assessment

The Transfer Impact Assessment (TIA) checklist outlines several key steps to assist organizations when performing a TIA. The TIA checklist also includes some important areas to consider when assessing third-country legal frameworks.

Transfer Impact Assessments

The CJEU's judgment in the Schrems II case changed the way organizations need to approach data transfers. The invalidation of the EU-US Privacy Shield meant that organizations could no longer rely on this mechanism for transatlantic data transfers. The CJEU's decision also cast doubt over the effectiveness of the European Commission’s Standard Contractual Clauses (SCCs) who subsequently issued a revised set of SCCs for organizations to utilize.

Furthermore, the European Data Protection Board (EDPB) released their final guidance on the supplementary measures that can be used to ensure an EU level of data protection when transferring personal data. The EDPB outlined that organizations need to perform a Transfer Impact Assessment (TIA) to evaluate the Article 46 transfer tool that they are relying on in light of the legal framework and practical application of the law in a third country destination. 

OneTrust Schrems II Solutions

OneTrust has a range of solutions for organizations to utilize when navigating the new data transfers landscape. These solutions include a comprehensive TIA template and TIA response automation. Request a demo today to learn more.  

Further resources: 

• OneTrust DataGuidance Blog: The Definitive Guide to Schrems II
• OneTrust DataGuidance Webinar: Events & Webinars Schrems II Fallout - Dealing With International Transfers Post-Schrems II & Reaction to the EDPB's Recommendations
• OneTrust Solutions: Schrems II Solutions

Follow OneTrust DataGuidance on LinkedIn to keep up to date with upcoming webinars, insights, and more.