Cross Border Data Transfer Mechanisms Sample Clauses
The Cross Border Data Transfer Mechanisms clause establishes the rules and requirements for transferring personal or sensitive data across national borders. Typically, this clause outlines the legal frameworks or safeguards—such as standard contractual clauses, binding corporate rules, or adequacy decisions—that must be in place before data can be sent to another country. Its core function is to ensure compliance with data protection laws and to mitigate the risk of unauthorized access or misuse of data when it is transferred internationally.
Cross Border Data Transfer Mechanisms. 2.1 Order of Precedence. In the event the Services are covered by more than one Transfer Mechanism, the transfer of Personal Data will be subject to a single Transfer Mechanism in accordance with the following order of precedence: (a) the EU Standard Contractual Clauses as set forth in Section 2.2 (EU Standard Contractual Clauses) of this Schedule 2; (b) the UK International Data Transfer Agreement as set forth in Section 2.3 (UK International Data Transfer Agreement) of this Schedule 2; and, if neither (a) nor (b) is applicable, then (c) other applicable data Transfer Mechanisms permitted under Applicable Data Protection Law.
Cross Border Data Transfer Mechanisms. 2.1 Order of Precedence. In the event the Services are covered by more than one Transfer Mechanism, the transfer of Personal Data will be subject to a single Transfer Mechanism in accordance with the following order of precedence: (a) the applicable Standard Contractual Clauses as set forth in Section 2.2 (UK Standard Contractual Clauses) or Section 2.3 (2021 Standard Contractual Clauses) of this Appendix 3; and, if (a) is not applicable, then
Cross Border Data Transfer Mechanisms. 2.1. Order of Precedence. In the event the Services are covered by more than one Transfer Mechanism, the transfer of Personal Data will be subject to a single Transfer Mechanism, as applicable, and in accordance with the following order of precedence:
(a) an adequacy decision granted by the European Commission as detailed here2 (b) the EU Standard Contractual Clauses as set forth in Section 2.3 EU Standard Contractual Clauses of this Annex V; (c) the EU Standard Contractual Clauses as modified and applicable under the Swiss data protection law (d) the UK International Data Transfer Addendum as set forth in Section 2.10 of this Annex V; and, if neither (a), (b), (c), (d) is applicable, then (e) other applicable data Transfer Mechanisms permitted under Applicable Data Protection Law.
2.2. EU-US Adequacy decision: To the extent that Customer is located in the United States of America and is self-certified under the Data Privacy Framework Constructor Technology further agrees (i) to provide at least the same level of protection to any personal data as required by the Data Privacy Principles; (ii) upon written notice, to work with Customer to take reasonable and appropriate steps to stop and remediate any unauthorized processing of personal data. The same will apply to Sub-Processors certified under the Data Privacy Framework. Customer agrees to notify Constructor Technology in writing, without undue delay, if its self-certification to the Data Privacy Framework is withdrawn, terminated, revoked, or otherwise invalidated (in which case, an alternative Transfer Mechanism will apply in accordance with the order of precedence in Section 2.1 Order of Precedence of this Annex V.
Cross Border Data Transfer Mechanisms