Transfer impact assessment

Appreciate your support to answer below questions related to transfer impact assessmentWho should create the data transfer impact assessment the controller or the processor

The data transfer impact assessment should be created by the controller who is the subject in charge of GDPR compliance towards the Authority and data subject. However, in some cases, if the data processor exports data to a sub-processor, the processor can assess the transfer impact in order to demonstrate compliance to GDPR to the data controller.

Is there any available Transfer impact assessment template for the processor

No, currently we have the template for the Cross Border Personal Data Transfer Procedure which can be tailored on transfers as controller or processor.

https://advisera.com/eugdpracademy/documentation/cross-border-personal-data-transfer-procedure/

Where can I find the updated version of the controller-processor SCCs"

You can find it on the website of the EU Commission: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj

Here you can find more information about data transfer:

• 3 steps for data transfers according to GDPR https://advisera.com/eugdpracademy/knowledgebase/3-steps-for-data-transfers-according-to-gdpr/

If you want to learn how to implement GDPR compliance in your organization, you may consider enrolling in our EU GDPR Foundations Course: https://training.advisera.com/course/eu-gdpr-foundations-course/