German state data protection authority publishes guidance following ‘Schrems II’ ruling

According to the International Association of Privacy Professionals (IAPP), the data protection authority (DPA) of the German state Baden-Württemberg has released guidance on data transfers following the Court of Justice of the European Union’s ruling “Schrems II.” The German DPA recommends companies immediately take stock of data transferred to third countries, determine whether there is an adequacy decision for that country, and verify if standard contractual clauses can be used.