According to the GDPR, standard contractual clauses can – somewhat simplified – be used  to  support the transfer of personal data between the EU/EEA and a third country. However, the clauses usually need to be supplemented by other technical protection measures, such as advanced encryption. It is the European Commission that develops or approves standard contractual clauses and they are available on the Commission’s website.

They were last updated on the 4th of June 2021, and companies that are still using old standard contractual clauses (older than the 4th of June 2021) need to update to a new version by the 27th of December 2022.