EDPB Plenary session adopts an Art. 64 GDPR opinion on the draft Standard Contractual Clauses

During the 28th European Data Protection Board (EDPB) plenary session, the EDPB adopted its opinion on the draft Standard Contractual Clauses (SCCs) for controller-processor contracts. The opinion aims to ensure the consistent application of Article 28 of the General Data Protection Regulation (GDPR), which imposes an obligation on controllers and processors to enter into a legal act, stipulating the parties’ respective obligations. According to Article 28(6) of the GDPR, these contracts, or other legal acts, may be based, in whole or in part, on standard contractual clauses adopted by a supervisory authority. In the opinion, the EDPB made several recommendations that need to be taken into account in order for these draft SCCs to be considered as Standard Contractual Clauses.