{"id":19661,"date":"2022-10-17T11:51:43","date_gmt":"2022-10-17T09:51:43","guid":{"rendered":"https:\/\/duthler.nl\/services\/protecting-personal-data\/data-transfer-impact-assessment-dtia\/"},"modified":"2024-03-28T13:47:42","modified_gmt":"2024-03-28T12:47:42","slug":"data-transfer-impact-assessment-dtia","status":"publish","type":"page","link":"https:\/\/duthler.nl\/en\/services\/protecting-personal-data\/data-transfer-impact-assessment-dtia\/","title":{"rendered":"Data Transfer Impact Assessment (DTIA)"},"content":{"rendered":"\n
<\/span>
<\/div>
\n
<\/div>\n\n\n\n
\n
\n

Want to have a Data Transfer Impact Assessment (DTIA) carried out?<\/strong><\/h2>\n\n\n\n

The GDPR does not apply outside the EU. However, companies in the EU sometimes need to share personal data with a company outside the EU for their business activities. That company outside the EU can take on the role of (sub) processor or process the data as a controller. This is called transfer of personal data. <\/p>\n\n\n\n

If personal data is shared outside the EU, the rights of data subjects may be harmed if it has not been established that the party outside the EU properly protects the personal data. The EU has assessed the legislation of several countries outside the EU as equivalent to the GDPR. It has been established for these countries that an adequate level of protection has been set up and the adequacy decision applies<\/a>. <\/p>\n\n\n\n

For the countries to which the adequacy decision does not apply, the European Data Protection Board (EDPB) has drawn up recommendations<\/a> if personal data is transferred to a third country. The company will have to establish with the importing company on a case-by-case basis whether the legislation or practice of the third country compromises the adequate protection of personal data. This company can be both a controller and a processor. The controller always remains ultimately responsible and will have to verify that the processor has carried out the assessment correctly. <\/p>\n\n\n\n

\n
Interested? Contact us!<\/a><\/div>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n
<\/span>
\n
<\/div>\n\n\n\n

What is our approach?<\/strong><\/h2>\n\n\n\n
\n
\n

The EDPB has included a Data Transfer Impact Assessment (DTIA) in its advice, which consists of six steps. <\/p>\n\n\n\n

In general, the steps consist of: <\/p>\n\n\n\n