Skill

Cross border transfer assessment

Assess the lawfulness of international personal data transfers under GDPR Chapter V, UK GDPR, and Swiss DPA (nDSG). Use when transferring personal data outside the EEA/UK/ Switzerland to a third country; when selecting or validating a transfer mechanism (adequacy decision, SCCs, BCRs, derogations); when building or reviewing a Transfer Impact Assessment (TIA) post-Schrems II; when assessing supplementary technical and organisational measures; when evaluating destination-country surveillance law (FISA 702, EO 12333, CLOUD Act, China PIPL/MPS, India DPDP); when reviewing Binding Corporate Rules for intra-group transfers; or when advising on Art. 49 derogations. Produces a mechanism selection decision, TIA, supplementary measures catalogue, risk classification (LAWFUL/RESTRICTED/UNLAWFUL per transfer), remediation roadmap, and Glass Box audit trail.