{"id":17928,"date":"2025-03-24T08:00:48","date_gmt":"2025-03-24T08:00:48","guid":{"rendered":"https:\/\/letslaw.es\/?p=17928"},"modified":"2025-03-06T09:22:17","modified_gmt":"2025-03-06T09:22:17","slug":"edpb-data-protection-seal-certification","status":"publish","type":"post","link":"https:\/\/letslaw.es\/en\/edpb-data-protection-seal-certification\/","title":{"rendered":"The EDPB clarifies rules for data exchange with authorities in third countries and approves the EU Data Protection Seal Certification"},"content":{"rendered":"

In an effort to strengthen personal data protection in the context of international transfers, the European Data Protection Board (EDPB) has issued <\/span>new guidelines on data exchange with authorities in third countries<\/b>.\u00a0<\/span><\/p>\n

Additionally, it has approved the certification of the European Union (EU) Data Protection Seal, providing a clearer framework to ensure the security and legality of these practices.<\/span><\/p>\n

EDPB Legislation for International Data Transfers<\/span><\/h2>\n

International data transfers have been a critical issue in privacy regulation, especially after the invalidation of the Privacy Shield between the EU and the U.S. in 2020. The EDPB has reinforced requirements to ensure that any data transfer to authorities in third countries complies with the General Data Protection Regulation (GDPR).<\/span><\/p>\n

The guidelines establish that:<\/span><\/p>\n

    \n
  1. Principle of necessity and proportionality<\/b>: transfers of data to authorities in third countries must be strictly necessary and proportionate to the intended objective.<\/span><\/li>\n
  2. Adequate safeguard mechanisms<\/b>: tools such as <\/span>Standard Contractual Clauses<\/span><\/a> (SCCs) or Binding Corporate Rules (BCRs) must be used to ensure an adequate level of protection.<\/span><\/li>\n
  3. Prior risk assessment<\/b>: before transferring data, companies and entities must assess whether the recipient country offers a level of protection equivalent to that of the GDPR.<\/span><\/li>\n
  4. Transparency and additional safeguards<\/b>: in cases where there are potential risks of foreign authorities accessing data, notification mechanisms and additional security measures must be established.<\/span><\/li>\n<\/ol>\n

    These measures aim to balance international cooperation with the need to protect the fundamental rights of European citizens.<\/span><\/p>\n

    Explanation of the Data Protection Seal Certification<\/span><\/h2>\n

    Along with transfer regulations, the EDPB has approved a certification scheme that allows organizations to demonstrate compliance with the GDPR through the EU Data Protection Seal.<\/span><\/p>\n

    Features of the seal:<\/span><\/p>\n