TABLE OF CONTENTS 1
Accountability in data transfers ...................................................................................................... 9
2
Roadmap: applying the principle of accountability to data transfers in practice ......................... 10 Step 1: Know your transfers .................................................................................................. 10 Step 2: Identify the transfer tools you are relying on ........................................................... 11 Step 3: Assess whether the Article 46 GDPR transfer tool you are relying on is effective in light of all circumstances of the transfer........................................................................................... 14 Step 4: Adopt supplementary measures ............................................................................... 21 Step 5: Procedural steps if you have identified effective supplementary measures ............ 23 Step 6: Re-evaluate at appropriate intervals ........................................................................ 25
3
Conclusion ..................................................................................................................................... 25
ANNEX 1: DEFINITIONS .......................................................................................................................... 27 ANNEX 2: EXAMPLES OF SUPPLEMENTARY MEASURES ........................................................................ 28 2.1 Technical measures ..................................................................................................................... 28 2.2 Additional contractual measures ................................................................................................ 36 2.3 Organisational measures ............................................................................................................. 43 ANNEX 3: POSSIBLE SOURCES OF INFORMATION TO ASSESS A THIRD COUNTRY ................................ 47
Adopted
6