On September 16, 2021, Amazon released an updated Data Processing Addendum to be compliant with the updated Standard Contractual Clauses and the recent international developments
Amazon Web Services (AWS) is the world’s most widely used and versatile cloud platform, with over 200 data center services available worldwide. The new / adopted amendment incorporates the new Standard Contractual Clauses (SCC) issued by the European Commission (EC) in June 2021
This means that customers (regardless of whether they are controllers or processors) will have the obligation to check and conclude the new Amendment of AWS to have the new SCC implemented when they transmit personal data to countries outside the European Economic Area (EEA) that have not acquired an adquate level of data protection according to EC compliance judgment (third countries). Because they cover multiple transfer situations and provide stronger data transfer protections, the new SCCs are now more suited to how the clients operate their apps or manage their operations to the cloud.
The current update will unquestionably cover according to AWS requirements of GDPR and the regualtory bodies if customer of AWS services sends personal data to third-party nations. Nevertheless customers need to check on additional requirements and solultions to be compliant to GDPR and Swiss Data Protection Act – the conclusion of the Data Processing Addendum may not be sufficient but need further checks and adjustments.
Further information please contact Carmen De la Cruz or Katharina Lasota Heller.