Penningtons Manches Cooper’s specialist data protection team has launched a data transfer action reporting service – known as PennSIFT - to support organisations facing new essential UK/EU compliance requirements relating to the cross-border sharing of personal data. The service has been developed in collaboration with Luminance, the leading artificial intelligence platform for the legal profession.
Under the latest data protection requirements, which also impact entities located outside the UK and EU, contracts and documents relating to transfers of UK/EU personal data - typically including EU standard contractual clauses – must be updated. This could be both time consuming and labour intensive, requiring significant resource if undertaken manually.
Penningtons Manches Cooper’s unique AI tool has been trained to signpost relevant clauses swiftly and accurately. Its remit is wide-ranging, covering: old standard contractual clauses for transfers from the EEA to third countries with an agreement end date that is later than 27 December 2022; old standard contractual clauses for transfers from the UK to third countries; the EU-US Privacy Shield framework for transfers between the UK and US; and other transfer mechanisms, such as an article 49 derogation or an adequacy decision.
PennSIFT is offered at a scalable fixed price to enable organisations to act quickly and cost-effectively to progress these essential compliance steps. The service can also include remediation work to address issues identified in the report. Penningtons Manches Cooper’s team can provide further analysis as well as devise and implement re-papering strategies and data transfer impact assessments (DTIAs), drawing on its significant experience in the US, India and other key jurisdictions.