SCC.

Standard Contractual Clauses are EU Commission-approved model contracts that provide GDPR-compliant safeguards for transfers of personal data outside the EEA. It belongs to the Compliance & Frameworks category of cybersecurity.

Standard Contractual Clauses are EU Commission-approved model contracts that provide GDPR-compliant safeguards for transfers of personal data outside the EEA.

Standard Contractual Clauses (SCCs) are template contracts issued by the European Commission under Article 46(2) GDPR that provide appropriate safeguards for transfers of personal data from the EEA to third countries. The current set was adopted in Commission Implementing Decision (EU) 2021/914 of 4 June 2021 and uses a modular structure (controller-to-controller, controller-to-processor, processor-to-processor, processor-to-controller) so parties can select the role-appropriate modules. After Schrems II (C-311/18), data exporters must also conduct a Transfer Impact Assessment (TIA) and, where necessary, implement supplementary measures (encryption, pseudonymisation, contractual or organisational measures). UK exporters use the UK International Data Transfer Agreement (IDTA) or the UK Addendum.

Defences for SCC typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: EU SCCs, 2021 SCCs, Standard Contractual Clauses.