Data Protection — European Commission

Model Contracts for the transfer of personal data to third countries

Overview

The Council and the European Parliament have given the Commission the power to decide, on the basis of Article 26 (4) of directive 95/46/EC that certain standard contractual clauses offer sufficient safeguards as required by Article 26 (2), that is, they provide adequate safeguards with respect to the protection of the privacy and fundamental rights and freedoms of individuals and as regards the exercise of the corresponding rights.

A proposal from the Commission,
an opinion of the group of the national data protection commissioners (Article 29 working party)
An opinion of the Article 31 Management committee delivered by a qualified majority of Member States.
A thirty-day right of scrutiny for the European Parliament, to check if the Commission has used its executing powers correctly. The EP may, if it considers it appropriate, issue a recommendation.
The adoption of the decision by the College of Commissioners.

The effect of such a decision is that by incorporating the standard contractual clauses into a contract, personal data can flow from a Data Controller established in any of the fifteen EU MS and three EEA member countries (Norway, Liechtenstein and Iceland) to a Data Controller established in a country not ensuring an adequate level of data protection. The Commission is in the process of approving standard contractual clauses for transfers of personal data to data processors...

Commission Staff Working Document SEC (2006) 95

Commission Staff Working Document on the implementation of the Commission decisions on standard contractual clauses for the transfer of personal data to third countries (2001/497/EC and 2002/16/EC)

SEC (2006) 95

Commission Decision C(2004)5271

Commission approves new standard clauses for data transfers to non-EU countries (7.1.2005)

Commission Decision 2001/497/EC

Commission Decision 2001/497/EC of 15 June 2001 under the Directive 95/46/EC - O.J. L 181/19 of 4.7.2001
- Complete text of the decision with the annex standard contractual clauses
- Press Release
Frequently Asked Questions on the Commission Decision 2001/497/EC
- Memo A
- Memo B
Commission replies to letters received from Business Organisations and the US Departments of Treasury and Commerce (April 2001)
Opinion 1/2001 on the Draft Commission Decision under the Article 26(4) of Directive 95/46, adopted by the Art. 29 Working Party on 26.1.2001
- Opinion 1/2001

Standard Contractual Clauses for Data Processors established in Third Countries

The model of the standard contractual clauses are only available in the PDF document of the Decision.

Commission Decision (2002/16/EC) of 27 December 2001 under the Directive 95/46/EC
- Complete text of the decision without the annex.
- Complete text of the decision with the annex "Standard Contractual Clauses"
Opinion 7/2001 on the Draft Commission Decision (version 31 August 2001) under the Article 26(4) of Directive 95/46
Comments to the outcome of the public consultation
Commission approves new standard clauses for data transfers to non-EU countries (7.1.2005)
- Press release
- Frequently asked questions

Press releases

The Commission urges Member States and Data Protection Authorities to improve the notification of international data transfers (26.09.2003)
Frequently Asked Questions on contractual solutions for the transfer of personal data to third countries" (13 February 2002)
Standard contractual clauses to facilitate personal data transfers to third countries for processing (22 January 2002)
- Press Release
- Decision (2002/16/EC)
The Art. 31 Committee gives green light to the Draft Commission Decision (4 December 2001)
New developments on standard contractual clauses for the transfer of personal data to third countries (16 November 2001)
Preliminary draft of a Commission decision under Article 26 (4) of the Directive 95/46/EC that do not provide an adequate level of protection for the processing of personal data (29 September 2000)