PennSIFT – AI assisted data transfer review

Ensure compliance with the new rules for international data transfers

The re-papering exercise needed following the release of new EU standard contractual clauses (SCCs) last year and new UK clauses for international data transfers earlier this year represents a major challenge for many businesses. Identifying relevant contracts alone can be time consuming and costly , drawing on significant resource if undertaken manually. PennSIFT, powered by leading AI platform Luminance, speeds up the process enabling organisations to quickly and accurately identify where changes need to be made.

PennSIFT, our transfer action reporting service, has been developed to help organisations with this repapering exercise.

PennSIFT will help to identify:

• transfers from the EEA currently using the old standard contractual clauses (SCCs) so that these can be updated with the new EU SCCs, now that the 27 December 2022 deadline has passed, and data transfer impact assessments (DTIAs) carried out;
• transfers from the UK currently using the old SCCs, so that these can be updated to ensure they work in a UK context post-Brexit and DTIAs carried out;
• transfers currently relying on the EU-US Privacy Shield, so that these can be replaced with an alternative method, such as the new SCCs until such time as a new EU-US data Privacy Framework is implemented (expected March 2023) or, for transfers from the UK to US, the UK reaches an adequacy decision in relation to the US (expected early 2023); and
• transfers currently relying on Binding Corporate Rules (BCRs), so DTIAs can be carried out and if necessary updated following Brexit.

Find out more about how PennSIFT can help your organisation with this process – quickly, easily and accurately

Standard Contractual Clauses Toolkit

Find out how your organisation is impacted and what actions you need to take using our easy to follow toolkit - Find out more here.