Transfers
International Data Transfer & TIA Checklist (SCCs / UK IDTA)
A transfer checklist for mapping flows, choosing a Chapter V tool, and completing a Transfer Impact Assessment.
- Estimated time
- 2–8 Weeks per Vendor Path
- Audience
- Privacy Counsel and Security Teams Using Non-Adequate Countries
- Last updated
Operational reference for transfer assessments after Schrems II. Supervisory authorities and courts interpret adequacy and SCCs.
Progress is saved in this browser only. Nothing is sent to a server.
Phase 1: Map
Phase 2: Mechanism
Phase 3: TIA
Phase 4: Maintain
FAQ
What is a TIA?+–
A Transfer Impact Assessment of whether the transfer tool plus destination law and TOMs actually protect the data.
Do SCCs replace a DPA?+–
No. You typically need both instructions (Art. 28) and a transfer tool (Chapter V).
Is the EU-US Data Privacy Framework enough?+–
It can be an adequacy path for certified US organizations. Confirm the vendor’s certification and scope.
UK vs EU?+–
Use EU SCCs for EU exports and UK IDTA/Addendum for UK exports as applicable.
Related field notes
The checklists and field notes provided on this website are for educational and informational purposes only. They do not constitute legal, financial, or professional advice. Completing a checklist does not guarantee compliance, certification, or immunity from audits. Always consult with a certified auditor or legal counsel for your specific organizational needs. Full disclaimer