SCCs and DPA at a glance
| Point | SCCs | DPA |
|---|---|---|
| Primary role | Standard contractual clauses address specified international personal-data transfers. | A data processing agreement allocates processing duties between business parties. |
| When used | When a transfer mechanism is required for a covered cross-border transfer. | When a controller-processor or similar vendor relationship requires processing terms. |
| Core content | Approved clause modules, parties, transfer details, safeguards, and annexes. | Instructions, confidentiality, security, subprocessors, assistance, audit, return, and deletion. |
| Relationship | SCCs may be attached to or incorporated into a DPA. | A DPA may need a separate transfer mechanism; it is not automatically that mechanism. |
| Check | Correct module, exporter and importer roles, annexes, transfer assessment, and supplementary measures. | Roles, scope, data details, security schedule, subprocessor terms, transfers, and conflict rules. |
Documents to put side by side
- The current draft or signed document for each option.
- Definitions, schedules, amendments, approvals, notices, and incorporated policies.
- A written business objective, timeline, cost model, and risk list.
- The primary source or professional advice that applies to the jurisdiction and facts.
Sources to verify
Use primary or authoritative sources to confirm current forms, filing instructions, agency rules, and legal definitions before acting on a general guide.
When professional help is useful
Use qualified advice before relying on a comparison for enforceability, tax treatment, worker status, privacy transfers, securities, regulated disclosures, litigation strategy, or a material transaction.
Before sharing records
- Keep originals in a controlled file and review a clearly dated working copy.
- Redact sensitive data unless the recipient is authorized and needs it.
- Label each document with its date, parties, version, jurisdiction, and status.
- Ask one focused question and identify the desired business outcome.