Topic

Codes of Conduct

Codes of Conduct provide structured frameworks for translating privacy and data protection requirements into practical rules tailored to particular sectors or processing activities. Explore GDPR Codes of Conduct under Articles 40 and 41, including their development, approval, monitoring, and use as accountability and international transfer mechanisms, as well as industry codes and similar frameworks relevant to privacy, data governance, and responsible data practices in the U.S.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Subscribe to The de la Torre Review