EDPB adopts guidelines on certification as a tool for international data transfers.

The European Data Protection Board ('EDPB') has adopted guidelines on certification as a tool for transfers. In particular with respect to the guidelines, the EDPB noted that Article 46(2)(f) of the GDPR introduces approved certification mechanisms as a new tool to transfer personal data to third countries in the absence of an adequacy agreement and noted that the main purpose of the guidelines is to provide further clarification on the practical use of this transfer tool.

The guidelines will be subject to public consultation until the end of September 2022.