Control Strategy GDPRPrivacyShieldAtOrganisation

URI: CSG-GDPRPrivacyShieldAtOrganisation

Package: GDPR

< prev | next >

Description: Organisation Operator has Privacy Shield status under the GDPR, i.e. they are committed to respect and uphold the GDPR when handling personal data from EU citizens and residents, even though they are based outside the EU.

Blocked Threats (4)

D.GDPR.DFHuoO.1

Personal data Data related to DataSubject transferred across borders: since the data subject DataSubject is subject to the GDPR, their data Data should not be communicated by process FlowsFrom across a border to process Process in jurisdiction RemoteJurisdiction unless the GDPR is in force or equivalent protection is provided.

D.GDPR.DSHuoO.1

Personal data Data related to DataSubject is communicated across borders: since the data subject DataSubject is subject to the GDPR, their data Data it should not be communicated via process Process in jurisdiction RemoteJurisdiction that does not enforce the GDPR or equivalent protection, without suitable protection measures.

H.GDPR.HuDSHoJoSt.1

Personal data Data should be stored in a suitable location: since Data relating to DataSubject is subject to the GDPR, it should be stored in a device in a GDPR-compliant jurisdiction or run by a Privacy Shield approved operator. If neither of these regulatory/contractual solutions are available, you need to store the data on a different device.

P.GDPR.HuDPoJoSt.1

Personal data Data related to DataSubject should be processed in a suitable location: since Data relating to DataSubject is subject to the GDPR, it should be processed in a GDPR-compliant jurisdiction or by a Privacy Shield approved operator. If neither of these regulatory/contractual solutions are available, you need to move the process to a different host, or move the host.