Skill

legalcode-cross-border-transfer-assessment

Assess the lawfulness of international personal data transfers under GDPR Chapter V, UK GDPR, and Swiss DPA (nDSG). Use when transferring personal data outside the EEA/UK/ Switzerland to a third country; when selecting or validating a transfer mechanism (adequacy decision, SCCs, BCRs, derogations); when building or reviewing a Transfer Impact Assessment (TIA) post-Schrems II; when assessing supplementary technical and organisational measures; when evaluating destination-country surveillance law (FISA 702, EO 12333, CLOUD Act, China PIPL/MPS, India DPDP); when reviewing Binding Corporate Rules for intra-group transfers; or when advising on Art. 49 derogations. Produces a mechanism selection decision, TIA, supplementary measures catalogue, risk classification (LAWFUL/RESTRICTED/UNLAWFUL per transfer), remediation roadmap, and Glass Box audit trail.