Enter to open, tab to navigate, enter to select
Appropriate safeguards
Practical Law Glossary Item w-014-8166 (Approx. 3 pages)
Glossary
Appropriate safeguards
Measures taken by a data owner, controller, or processor to protection personal data or information.
The term may have specific definitions in certain jurisdictions. Under the General Data Protection Regulation (GDPR), for example, appropriate safeguards are measures taken by a controller or processor to enable cross-border data transfers to be made to a third country or an international organisation.
Appropriate safeguards include:
- A legally binding and enforceable instrument between public authorities.
- Binding corporate rules (BCRs).
- Standard contractual clauses adopted by the local regulatory authority.
- Standard contractual clauses adopted by a supervisory authority and approved by the local regulatory authority.
- An approved code of conduct.
- An approved certification mechanism.
(Article 46(2), GDPR.)
For more information, see Practice note, Overview of the EU General Data Protection Regulation: Adequate safeguards.