Standard Contractual Clauses (SCCs)
Pre-approved contractual terms for transferring personal data to countries outside the EEA.
Standard Contractual Clauses are sets of contractual terms approved by the European Commission that provide appropriate safeguards for the transfer of personal data outside the EEA. The current SCCs (adopted June 2021) are modular, covering four scenarios: controller-to-controller, controller-to-processor, processor-to-processor, and processor-to-controller. Organizations using SCCs must also conduct a Transfer Impact Assessment to evaluate whether the laws of the destination country provide adequate protection. If not, supplementary measures (technical, contractual, or organizational) must be implemented. SCCs are the most commonly used mechanism for international data transfers from the EU.