CINXE.COM

<!DOCTYPE html><html lang=en-US class="no-js no-svg"><head><meta charset=UTF-8><meta name=viewport content="width=device-width, initial-scale=1.0"><link rel=profile href=http://gmpg.org/xfn/11><link type=text/css media=all href=https://gdpr.eu/wp-content/cache/autoptimize/css/autoptimize_88073fbb10b912e714cec31503f2ec90.css rel=stylesheet><title>Recital 168 - Implementing acts on standard contractual clauses - GDPR.eu</title> <script>(function(d, s, id){ var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) {return;} js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.6"; fjs.parentNode.insertBefore(js, fjs); }(document, 'script', 'facebook-jssdk'));</script> <meta name=robots content="max-snippet:-1, max-image-preview:large, max-video-preview:-1"><link rel=canonical href=https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/ ><meta property=og:locale content=en_US><meta property=og:type content=article><meta property=og:title content="Recital 168 - Implementing acts on standard contractual clauses - GDPR.eu"><meta property=og:description content="Recital 168Implementing acts on standard contractual clauses The examination procedure should be used for the adoption of implementing acts on standard contractual clauses between controllers and processors and between..."><meta property=og:url content=https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/ ><meta property=og:site_name content=GDPR.eu><meta property=article:tag content=Recitals><meta property=article:section content=Uncategorized><meta property=article:published_time content=2018-11-14T01:23:54+00:00><meta property=article:modified_time content=2023-09-14T15:43:28+00:00><meta property=og:updated_time content=2023-09-14T15:43:28+00:00><meta name=twitter:card content=summary_large_image><meta name=twitter:description content="Recital 168Implementing acts on standard contractual clauses The examination procedure should be used for the adoption of implementing acts on standard contractual clauses between controllers and processors and between..."><meta name=twitter:title content="Recital 168 - Implementing acts on standard contractual clauses - GDPR.eu"> <script type=application/ld+json class='yoast-schema-graph yoast-schema-graph--main'>{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://gdpr.eu/#organization","name":"GDPR.eu","url":"https://gdpr.eu/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https://gdpr.eu/#logo","url":"https://gdpr.eu/wp-content/uploads/2019/02/profile-pic-PH-gdpr.jpg","width":900,"height":900,"caption":"GDPR.eu"},"image":{"@id":"https://gdpr.eu/#logo"}},{"@type":"WebSite","@id":"https://gdpr.eu/#website","url":"https://gdpr.eu/","name":"GDPR.eu","publisher":{"@id":"https://gdpr.eu/#organization"},"potentialAction":{"@type":"SearchAction","target":"https://gdpr.eu/?s={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"WebPage","@id":"https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/#webpage","url":"https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/","inLanguage":"en-US","name":"Recital 168 - Implementing acts on standard contractual clauses - GDPR.eu","isPartOf":{"@id":"https://gdpr.eu/#website"},"datePublished":"2018-11-14T01:23:54+00:00","dateModified":"2023-09-14T15:43:28+00:00"},{"@type":"Article","@id":"https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/#article","isPartOf":{"@id":"https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/#webpage"},"author":{"@id":"https://gdpr.eu/#/schema/person/ea6a6cfb7b5ad33e0b774ac2085eb166"},"headline":"Recital 168 – Implementing acts on standard contractual clauses","datePublished":"2018-11-14T01:23:54+00:00","dateModified":"2023-09-14T15:43:28+00:00","commentCount":0,"mainEntityOfPage":{"@id":"https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/#webpage"},"publisher":{"@id":"https://gdpr.eu/#organization"},"keywords":"Recitals","articleSection":""},{"@type":["Person"],"@id":"https://gdpr.eu/#/schema/person/ea6a6cfb7b5ad33e0b774ac2085eb166","name":"Ben Wolford","image":{"@type":"ImageObject","@id":"https://gdpr.eu/#authorlogo","url":"https://secure.gravatar.com/avatar/41724bffc3c429bc44aff458c88401e5?s=96&d=mm&r=g","caption":"Ben Wolford"},"description":"A journalist by training, Ben has reported and covered stories around the world. He joined <a href=\"https://proton.me?ref=gdpreu\">Proton</a> to help lead the fight for data privacy.","sameAs":[]}]}</script> <link rel=dns-prefetch href=//ws.sharethis.com><link rel=dns-prefetch href=//cdn.jsdelivr.net><link rel=dns-prefetch href=//maxcdn.bootstrapcdn.com><link rel=dns-prefetch href=//fonts.googleapis.com><link rel=dns-prefetch href=//use.fontawesome.com><link rel=dns-prefetch href=//s.w.org><link rel=alternate type=application/rss+xml title="GDPR.eu » Feed" href=https://gdpr.eu/feed/ ><link rel=alternate type=application/rss+xml title="GDPR.eu » Comments Feed" href=https://gdpr.eu/comments/feed/ ><link rel=alternate type=application/rss+xml title="GDPR.eu » Recital 168 – Implementing acts on standard contractual clauses Comments Feed" href=https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/feed/ > <script>window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/12.0.0-1\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/12.0.0-1\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/gdpr.eu\/wp-includes\/js\/wp-emoji-release.min.js?ver=8c03ada028d9ba4936249699216631ae"}}; !function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340],[55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings);</script> <style>img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 .07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; }</style><link rel=stylesheet id=simple-share-buttons-adder-font-awesome-css href='//maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css?ver=8c03ada028d9ba4936249699216631ae' type=text/css media=all><link rel=stylesheet id=opensans-css href='https://fonts.googleapis.com/css?family=Open+Sans' type=text/css media=all><link rel=stylesheet id=font-awesome-css href=https://use.fontawesome.com/releases/v5.1.1/css/all.css type=text/css media=all> <script src="https://gdpr.eu/wp-content/cache/minify/c7035.js"></script> <script id=st_insights_js src='https://ws.sharethis.com/button/st_insights.js?publisher=4d48b7c5-0ae3-43d4-bfbe-3ff8c17a8ae6&product=simpleshare'></script> <link rel=https://api.w.org/ href=https://gdpr.eu/wp-json/ ><link rel=EditURI type=application/rsd+xml title=RSD href=https://gdpr.eu/xmlrpc.php?rsd><link rel=wlwmanifest type=application/wlwmanifest+xml href=https://gdpr.eu/wp-includes/wlwmanifest.xml><link rel=shortlink href='https://gdpr.eu/?p=6471'><link rel=alternate type=application/json+oembed href="https://gdpr.eu/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fgdpr.eu%2Frecital-168-implementing-acts-on-standard-contractual-clauses%2F"><link rel=alternate type=text/xml+oembed href="https://gdpr.eu/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fgdpr.eu%2Frecital-168-implementing-acts-on-standard-contractual-clauses%2F&format=xml"><link rel="shortcut icon" href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon.ico><link rel=apple-touch-icon sizes=57x57 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-57x57.png><link rel=apple-touch-icon sizes=60x60 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-60x60.png><link rel=apple-touch-icon sizes=72x72 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-72x72.png><link rel=apple-touch-icon sizes=76x76 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-76x76.png><link rel=apple-touch-icon sizes=114x114 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-114x114.png><link rel=apple-touch-icon sizes=120x120 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-120x120.png><link rel=apple-touch-icon sizes=144x144 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-144x144.png><link rel=apple-touch-icon sizes=152x152 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-152x152.png><link rel=apple-touch-icon sizes=180x180 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-180x180.png><link rel=icon type=image/png sizes=192x192 href=https://gdpr.eu/wp-content/themes/gdpr/assets/android-icon-192x192.png><link rel=icon type=image/png sizes=32x32 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-32x32.png><link rel=icon type=image/png sizes=96x96 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-96x96.png><link rel=icon type=image/png sizes=16x16 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-16x16.png><link rel=manifest href=https://gdpr.eu/wp-content/themes/gdpr/assets/manifest.json><meta name=msapplication-TileColor content=#ffffff><meta name=msapplication-TileImage content=https://gdpr.eu/wp-content/themes/gdpr/assets/ms-icon-144x144.png><meta name=theme-color content=#ffffff><style>.recentcomments a{display:inline !important;padding:0 !important;margin:0 !important;}</style></head><body class="post-template-default single single-post postid-6471 single-format-standard cookies-not-set"><div id=wrapper><header id=header><div id=social><div class="container text-right"> <a target=_blank href="http://www.facebook.com/sharer.php?u=https://gdpr.eu/"><em class="fab fa-facebook"></em> <span>Facebook</span></a> <a target=_blank href="http://twitter.com/share?url=https://gdpr.eu/"><em class="fab fa-twitter"></em> <span>Twitter</span></a></div></div><div id=top><div class=container><div class=pull-right><div class=search-box><form role=search method=get class=search-form action=https://gdpr.eu/ > <input type=search id=search-form-674b7d5604e9c class=textbox placeholder=Search... value name=s> <button type=submit class=button><i class=icon-search></i><span>Search</span></button></form></div></div> <span id=logo> <a href=https://gdpr.eu/ class=gdpr></a> <a target=_blank href=https://ec.europa.eu/programmes/horizon2020/en/ class=horizon></a> <img class=full src=https://gdpr.eu/wp-content/themes/gdpr/images/logo-gdpr-eu.svg alt=GDPR.eu> <img class=short src=https://gdpr.eu/wp-content/themes/gdpr/images/logo-gdpr-eu-notext.svg alt=GDPR.eu> </span></div></div><nav id=nav><div class=container><div id=searchx><div class=search-box><form role=search method=get class=search-form action=https://gdpr.eu/ > <input type=search id=search-form-674b7d560501f class=textbox placeholder=Search... value name=s> <button type=submit class=button><i class=icon-search></i><span>Search</span></button></form></div></div><nav id=mainmenu class=menu-primary-menu-container><ul><li id=menu-item-309 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-home menu-item-309"><a href=https://gdpr.eu/ >Home</a></li><li id=menu-item-351 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-351"><a href=https://gdpr.eu/checklist/ >Checklist</a></li><li id=menu-item-8150 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8150"><a href=https://gdpr.eu/faq/ >FAQ</a></li><li id=menu-item-394 class="menu-item menu-item-type-taxonomy menu-item-object-post_tag menu-item-394"><a href=https://gdpr.eu/tag/gdpr/ >GDPR</a></li><li id=menu-item-350 class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-350"><a href=https://gdpr.eu/category/news-updates/ >News & Updates</a></li></ul></nav></div></nav></header><div id=main><div id=primary class="content-area one-column"><div id=content class=site-content><div id=primary class="content-area one-column"><div class=post-main-box><div class="container section-row"><div class=post-detail-box><div class="container "><h1>Recitals</h1><div class=row><div class="col-lg-4 d-none d-xl-block"><div id=sidebar class=recitals><ul><li data-id=5636><a href=https://gdpr.eu/recital-1-data-protection-as-a-fundamental-right/ >1</a></li><li data-id=5641><a href=https://gdpr.eu/recital-2-respect-of-the-fundamental-rights-and-freedoms/ >2</a></li><li data-id=5646><a href=https://gdpr.eu/recital-3-directive-95-46-ec-harmonisation/ >3</a></li><li data-id=5651><a href=https://gdpr.eu/recital-4-data-protection-in-balance-with-other-fundamental-rights/ >4</a></li><li data-id=5656><a href=https://gdpr.eu/recital-5-cooperation-between-member-states-to-exchange-personal-data/ >5</a></li><li data-id=5661><a href=https://gdpr.eu/recital-6-ensuring-a-high-level-of-data-protection-despite-the-increased-exchange-of-data/ >6</a></li><li data-id=5666><a href=https://gdpr.eu/recital-7-the-framework-is-based-on-control-and-certainty/ >7</a></li><li data-id=5671><a href=https://gdpr.eu/recital-8-adoption-into-national-law/ >8</a></li><li data-id=5676><a href=https://gdpr.eu/recital-9-different-standards-of-protection-by-the-directive-95-46-ec/ >9</a></li><li data-id=5681><a href=https://gdpr.eu/recital-10-harmonised-level-of-data-protection-despite-national-scope/ >10</a></li><li data-id=5686><a href=https://gdpr.eu/recital-11-harmonisation-of-the-powers-and-sanctions/ >11</a></li><li data-id=5691><a href=https://gdpr.eu/recital-12-authorization-of-the-european-parliament-and-the-council/ >12</a></li><li data-id=5696><a href=https://gdpr.eu/recital-13-taking-account-of-micro-small-and-medium-sized-enterprises/ >13</a></li><li data-id=5701><a href=https://gdpr.eu/recital-14-not-applicable-to-legal-persons/ >14</a></li><li data-id=5706><a href=https://gdpr.eu/recital-15-technology-neutrality/ >15</a></li><li data-id=5711><a href=https://gdpr.eu/recital-16-not-applicable-to-activities-regarding-national-and-common-security/ >16</a></li><li data-id=5716><a href=https://gdpr.eu/recital-17-adaptation-of-regulation-ec-no-45-2001/ >17</a></li><li data-id=5721><a href=https://gdpr.eu/recital-18-not-applicable-to-personal-or-household-activities/ >18</a></li><li data-id=5726><a href=https://gdpr.eu/recital-19-not-applicable-to-criminal-prosecution/ >19</a></li><li data-id=5731><a href=https://gdpr.eu/recital-20-respecting-the-independence-of-the-judiciary/ >20</a></li><li data-id=5736><a href=https://gdpr.eu/recital-21-liability-rules-of-intermediary-service-providers-shall-remain-unaffected/ >21</a></li><li data-id=5741><a href=https://gdpr.eu/recital-22-processing-by-an-establishment/ >22</a></li><li data-id=5746><a href=https://gdpr.eu/recital-23-applicable-to-processors-not-established-in-the-union-if-data-subjects-within-the-union-are-targeted/ >23</a></li><li data-id=5751><a href=https://gdpr.eu/recital-24-applicable-to-processors-not-established-in-the-union-if-data-subjects-within-the-union-are-profiled/ >24</a></li><li data-id=5756><a href=https://gdpr.eu/recital-25-applicable-to-processors-due-to-international-law/ >25</a></li><li data-id=5761><a href=https://gdpr.eu/recital-26-not-applicable-to-anonymous-data/ >26</a></li><li data-id=5766><a href=https://gdpr.eu/recital-27-not-applicable-to-data-of-deceased-persons/ >27</a></li><li data-id=5771><a href=https://gdpr.eu/recital-28-introduction-of-pseudonymisation/ >28</a></li><li data-id=5776><a href=https://gdpr.eu/recital-29-pseudonymisation-at-the-same-controller/ >29</a></li><li data-id=5781><a href=https://gdpr.eu/recital-30-online-identifiers-for-profiling-and-identification/ >30</a></li><li data-id=5786><a href=https://gdpr.eu/recital-31-not-applicable-to-public-authorities-in-connection-with-their-official-tasks/ >31</a></li><li data-id=5791><a href=https://gdpr.eu/recital-32-conditions-for-consent/ >32</a></li><li data-id=5796><a href=https://gdpr.eu/recital-33-consent-to-certain-areas-of-scientific-research/ >33</a></li><li data-id=5801><a href=https://gdpr.eu/recital-34-genetic-data/ >34</a></li><li data-id=5806><a href=https://gdpr.eu/recital-35-health-data/ >35</a></li><li data-id=5811><a href=https://gdpr.eu/recital-36-determination-of-the-main-establishment/ >36</a></li><li data-id=5816><a href=https://gdpr.eu/recital-37-enterprise-group/ >37</a></li><li data-id=5821><a href=https://gdpr.eu/recital-38-special-protection-of-childrens-personal-data/ >38</a></li><li data-id=5826><a href=https://gdpr.eu/recital-39-principles-of-data-processing/ >39</a></li><li data-id=5831><a href=https://gdpr.eu/recital-40-lawfulness-of-data-processing/ >40</a></li><li data-id=5836><a href=https://gdpr.eu/recital-41-legal-basis-or-legislative-measures/ >41</a></li><li data-id=5891><a href=https://gdpr.eu/recital-52-exceptions-to-the-prohibition-on-processing-special-categories-of-personal-data/ >42</a></li><li data-id=5896><a href=https://gdpr.eu/recital-53-processing-of-sensitive-data-in-health-and-social-sector/ >43</a></li><li data-id=5901><a href=https://gdpr.eu/recital-54-processing-of-sensitive-data-in-public-health-sector/ >44</a></li><li data-id=5906><a href=https://gdpr.eu/recital-55-public-interest-in-processing-by-official-authorities-for-objectives-of-recognized-religious-communities/ >45</a></li><li data-id=5911><a href=https://gdpr.eu/recital-56-processing-personal-data-on-peoples-political-opinions-by-parties/ >46</a></li><li data-id=5916><a href=https://gdpr.eu/recital-57-additional-data-for-identification-purposes/ >47</a></li><li data-id=5921><a href=https://gdpr.eu/recital-58-the-principle-of-transparency/ >48</a></li><li data-id=5926><a href=https://gdpr.eu/recital-59-procedures-for-the-exercise-of-the-rights-of-the-data-subjects/ >49</a></li><li data-id=5931><a href=https://gdpr.eu/recital-60-information-obligation/ >50</a></li><li data-id=5936><a href=https://gdpr.eu/recital-61-time-of-information/ >51</a></li><li data-id=5841><a href=https://gdpr.eu/recital-42-burden-of-proof-and-requirements-for-consent/ >52</a></li><li data-id=5846><a href=https://gdpr.eu/recital-43-freely-given-consent/ >53</a></li><li data-id=5851><a href=https://gdpr.eu/recital-44-performance-of-a-contract/ >54</a></li><li data-id=5856><a href=https://gdpr.eu/recital-45-fulfillment-of-legal-obligations/ >55</a></li><li data-id=5861><a href=https://gdpr.eu/recital-46-vital-interests-of-the-data-subject/ >56</a></li><li data-id=5866><a href=https://gdpr.eu/recital-47-overriding-legitimate-interest/ >57</a></li><li data-id=5871><a href=https://gdpr.eu/recital-48-overriding-legitimate-interest-within-group-of-undertakings/ >58</a></li><li data-id=5876><a href=https://gdpr.eu/recital-49-network-and-information-security-as-overriding-legitimate-interest/ >59</a></li><li data-id=5881><a href=https://gdpr.eu/recital-50-further-processing-of-personal-data/ >60</a></li><li data-id=5886><a href=https://gdpr.eu/recital-51-protecting-sensitive-personal-data/ >61</a></li><li data-id=5941><a href=https://gdpr.eu/recital-62-exceptions-to-the-obligation-to-provide-information/ >62</a></li><li data-id=5946><a href=https://gdpr.eu/recital-63-right-of-access/ >63</a></li><li data-id=5951><a href=https://gdpr.eu/recital-64-identity-verification/ >64</a></li><li data-id=5956><a href=https://gdpr.eu/recital-65-right-of-rectification-and-erasure/ >65</a></li><li data-id=5961><a href=https://gdpr.eu/recital-66-right-to-be-forgotten/ >66</a></li><li data-id=5966><a href=https://gdpr.eu/recital-67-restriction-of-processing/ >67</a></li><li data-id=5971><a href=https://gdpr.eu/recital-68-right-of-data-portability/ >68</a></li><li data-id=5976><a href=https://gdpr.eu/recital-69-right-to-object/ >69</a></li><li data-id=5981><a href=https://gdpr.eu/recital-70-right-to-object-to-direct-marketing/ >70</a></li><li data-id=5986><a href=https://gdpr.eu/recital-71-profiling/ >71</a></li><li data-id=5991><a href=https://gdpr.eu/recital-72-guidance-of-the-european-data-protection-board-regarding-profiling/ >72</a></li><li data-id=5996><a href=https://gdpr.eu/recital-73-restrictions-of-rights-and-principles/ >73</a></li><li data-id=6001><a href=https://gdpr.eu/recital-74-responsibility-and-liability-of-the-controller/ >74</a></li><li data-id=6006><a href=https://gdpr.eu/recital-75-risks-to-the-rights-and-freedoms-of-natural-persons/ >75</a></li><li data-id=6011><a href=https://gdpr.eu/recital-76-risk-assessment/ >76</a></li><li data-id=6016><a href=https://gdpr.eu/recital-77-risk-assessment-guidelines/ >77</a></li><li data-id=6021><a href=https://gdpr.eu/recital-78-appropriate-technical-and-organisational-measures/ >78</a></li><li data-id=6026><a href=https://gdpr.eu/recital-79-allocation-of-the-responsibilities/ >79</a></li><li data-id=6031><a href=https://gdpr.eu/recital-80-designation-of-a-representative/ >80</a></li><li data-id=6036><a href=https://gdpr.eu/recital-81-the-use-of-processors/ >81</a></li><li data-id=6041><a href=https://gdpr.eu/recital-82-record-of-processing-activities/ >82</a></li><li data-id=6046><a href=https://gdpr.eu/recital-83-security-of-processing/ >83</a></li><li data-id=6051><a href=https://gdpr.eu/recital-84-risk-evaluation-and-impact-assessment/ >84</a></li><li data-id=6056><a href=https://gdpr.eu/recital-85-notification-obligation-of-breaches-to-the-supervisory-authority/ >85</a></li><li data-id=6061><a href=https://gdpr.eu/recital-86-notification-of-data-subjects-in-case-of-data-breaches/ >86</a></li><li data-id=6066><a href=https://gdpr.eu/recital-87-promptness-of-reporting-notification/ >87</a></li><li data-id=6071><a href=https://gdpr.eu/recital-88-format-and-procedures-of-the-notification/ >88</a></li><li data-id=6076><a href=https://gdpr.eu/recital-89-elimination-of-the-general-reporting-requirement/ >89</a></li><li data-id=6081><a href=https://gdpr.eu/recital-90-data-protection-impact-assessement/ >90</a></li><li data-id=6086><a href=https://gdpr.eu/recital-91-necessity-of-a-data-protection-impact-assessment/ >91</a></li><li data-id=6091><a href=https://gdpr.eu/recital-92-broader-data-protection-impact-assessment/ >92</a></li><li data-id=6096><a href=https://gdpr.eu/recital-93-data-protection-impact-assessment-at-authorities/ >93</a></li><li data-id=6101><a href=https://gdpr.eu/recital-94-consultation-of-the-supervisory-authority/ >94</a></li><li data-id=6106><a href=https://gdpr.eu/recital-95-support-by-the-processor/ >95</a></li><li data-id=6111><a href=https://gdpr.eu/recital-96-consultation-of-the-supervisory-authority-in-the-course-of-a-legislative-process/ >96</a></li><li data-id=6116><a href=https://gdpr.eu/recital-97-data-protection-officer/ >97</a></li><li data-id=6121><a href=https://gdpr.eu/recital-98-preparation-of-codes-of-conduct-by-organisations-and-associations/ >98</a></li><li data-id=6126><a href=https://gdpr.eu/recital-99-consultation-of-stakeholders-and-data-subjects-in-the-development-of-codes-of-conduct/ >99</a></li><li data-id=6131><a href=https://gdpr.eu/recital-100-certification/ >100</a></li><li data-id=6136><a href=https://gdpr.eu/recital-101-general-principles-for-international-data-transfers/ >101</a></li><li data-id=6146><a href=https://gdpr.eu/recital-103-appropriate-level-of-data-protection-based-on-an-adequacy-decision/ >102</a></li><li data-id=6151><a href=https://gdpr.eu/recital-104-criteria-for-an-adequacy-decision/ >103</a></li><li data-id=6156><a href=https://gdpr.eu/recital-105-consideration-of-international-agreements-for-an-adequacy-decision/ >104</a></li><li data-id=6161><a href=https://gdpr.eu/recital-106-monitoring-and-periodic-review-of-the-level-of-data-protection/ >105</a></li><li data-id=6166><a href=https://gdpr.eu/recital-107-amendment-revocation-and-suspension-of-adequacy-decisions/ >106</a></li><li data-id=6171><a href=https://gdpr.eu/recital-108-appropriate-safeguards/ >107</a></li><li data-id=6176><a href=https://gdpr.eu/recital-109-standard-data-protection-clauses/ >108</a></li><li data-id=6181><a href=https://gdpr.eu/recital-110-binding-corporate-rules/ >109</a></li><li data-id=6186><a href=https://gdpr.eu/recital-111-exceptions-for-certain-cases-of-international-transfers/ >110</a></li><li data-id=6191><a href=https://gdpr.eu/recital-112-data-transfers-due-to-important-reasons-of-public-interest/ >111</a></li><li data-id=6196><a href=https://gdpr.eu/recital-113-transfers-qualified-as-not-repetitive-and-that-only-concern-a-limited-number-of-data-subjects/ >112</a></li><li data-id=6201><a href=https://gdpr.eu/recital-114-safeguarding-of-enforceability-of-rights-and-obligations-in-the-absence-of-an-adequacy-decision/ >113</a></li><li data-id=6206><a href=https://gdpr.eu/recital-115-rules-in-third-countries-contrary-to-the-regulation/ >114</a></li><li data-id=6211><a href=https://gdpr.eu/recital-116-cooperation-among-supervisory-authorities/ >115</a></li><li data-id=6216><a href=https://gdpr.eu/recital-117-establishment-of-supervisory-authorities/ >116</a></li><li data-id=6221><a href=https://gdpr.eu/recital-118-monitoring-of-the-supervisory-authorities/ >117</a></li><li data-id=6226><a href=https://gdpr.eu/recital-119-organisation-of-several-supervisory-authorities-of-a-member-state/ >118</a></li><li data-id=6231><a href=https://gdpr.eu/recital-120-features-of-supervisory-authorities/ >119</a></li><li data-id=6236><a href=https://gdpr.eu/recital-121-independence-of-the-supervisory-authorities/ >120</a></li><li data-id=6141><a href=https://gdpr.eu/recital-102-international-agreements-for-an-appropriate-level-of-data-protection/ >121</a></li><li data-id=6241><a href=https://gdpr.eu/recital-122-responsibility-of-the-supervisory-authorities/ >122</a></li><li data-id=6246><a href=https://gdpr.eu/recital-123-cooperation-of-the-supervisory-authorities-with-each-other-and-with-the-commission/ >123</a></li><li data-id=6251><a href=https://gdpr.eu/recital-124-lead-authority-regarding-processing-in-several-member-states/ >124</a></li><li data-id=6256><a href=https://gdpr.eu/recital-125-competences-of-the-lead-authority/ >125</a></li><li data-id=6261><a href=https://gdpr.eu/recital-126-joint-decisions/ >126</a></li><li data-id=6266><a href=https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/ >127</a></li><li data-id=6271><a href=https://gdpr.eu/recital-128-responsibility-regarding-processing-in-the-public-interest/ >128</a></li><li data-id=6276><a href=https://gdpr.eu/recital-129-tasks-and-powers-of-the-supervisory-authorities/ >129</a></li><li data-id=6281><a href=https://gdpr.eu/recital-130-consideration-of-the-authority-with-which-the-complaint-has-been-lodged/ >130</a></li><li data-id=6286><a href=https://gdpr.eu/recital-131-attempt-of-an-amicable-settlement/ >131</a></li><li data-id=6291><a href=https://gdpr.eu/recital-132-awareness-raising-activities-and-specific-measures/ >132</a></li><li data-id=6296><a href=https://gdpr.eu/recital-133-mutual-assistance-and-provisional-measures/ >133</a></li><li data-id=6301><a href=https://gdpr.eu/recital-134-participation-in-joint-operations/ >134</a></li><li data-id=6306><a href=https://gdpr.eu/recital-135-consistency-mechanism/ >135</a></li><li data-id=6311><a href=https://gdpr.eu/recital-136-binding-decisions-and-opinions-of-the-board/ >136</a></li><li data-id=6316><a href=https://gdpr.eu/recital-137-provisional-measures/ >137</a></li><li data-id=6321><a href=https://gdpr.eu/recital-138-urgency-procedure/ >138</a></li><li data-id=6326><a href=https://gdpr.eu/recital-139-european-data-protection-board/ >139</a></li><li data-id=6331><a href=https://gdpr.eu/recital-140-secretariat-and-staff-of-the-board/ >140</a></li><li data-id=6336><a href=https://gdpr.eu/recital-141-right-to-lodge-a-complaint/ >141</a></li><li data-id=6401><a href=https://gdpr.eu/recital-154-principle-of-public-access-to-official-documents/ >142</a></li><li data-id=6406><a href=https://gdpr.eu/recital-155-processing-in-the-employment-context/ >143</a></li><li data-id=6411><a href=https://gdpr.eu/recital-156-processing-for-archiving-scientific-or-historical-research-or-statistical-purposes/ >144</a></li><li data-id=6416><a href=https://gdpr.eu/recital-157-information-from-registries-and-scientific-research/ >145</a></li><li data-id=6421><a href=https://gdpr.eu/recital-158-processing-for-archiving-purposes/ >146</a></li><li data-id=6426><a href=https://gdpr.eu/recital-159-processing-for-scientific-research-purposes/ >147</a></li><li data-id=6431><a href=https://gdpr.eu/recital-160-processing-for-historical-research-purposes/ >148</a></li><li data-id=6436><a href=https://gdpr.eu/recital-161-consenting-to-the-participation-in-clinical-trials/ >149</a></li><li data-id=6341><a href=https://gdpr.eu/recital-142-the-right-of-data-subjects-to-mandate-a-not-for-profit-body-organisation-or-association/ >150</a></li><li data-id=6346><a href=https://gdpr.eu/recital-143-judicial-remedies/ >151</a></li><li data-id=6351><a href=https://gdpr.eu/recital-144-related-proceedings/ >152</a></li><li data-id=6356><a href=https://gdpr.eu/recital-145-choice-of-venue/ >153</a></li><li data-id=6361><a href=https://gdpr.eu/recital-146-indemnity/ >154</a></li><li data-id=6366><a href=https://gdpr.eu/recital-147-jurisdiction/ >155</a></li><li data-id=6371><a href=https://gdpr.eu/recital-148-penalties/ >156</a></li><li data-id=6376><a href=https://gdpr.eu/recital-149-penalties-for-infringements-of-national-rules/ >157</a></li><li data-id=6381><a href=https://gdpr.eu/recital-150-administrative-fines/ >158</a></li><li data-id=6386><a href=https://gdpr.eu/recital-151-administrative-fines-in-denmark-and-estonia/ >159</a></li><li data-id=6391><a href=https://gdpr.eu/recital-152-power-of-sanction-of-the-member-states/ >160</a></li><li data-id=6396><a href=https://gdpr.eu/recital-153-processing-of-personal-data-solely-for-journalistic-purposes-or-for-the-purposes-of-academic-artistic-or-literary-expression/ >161</a></li><li data-id=6441><a href=https://gdpr.eu/recital-162-processing-for-statistical-purposes/ >162</a></li><li data-id=6446><a href=https://gdpr.eu/recital-163-production-of-european-and-national-statistics/ >163</a></li><li data-id=6451><a href=https://gdpr.eu/recital-164-professional-or-other-equivalent-secrecy-obligations/ >164</a></li><li data-id=6456><a href=https://gdpr.eu/recital-165-no-prejudice-of-the-status-of-churches-and-religious-associations/ >165</a></li><li data-id=6461><a href=https://gdpr.eu/recital-166-delegated-acts-of-the-commission/ >166</a></li><li data-id=6466><a href=https://gdpr.eu/recital-167-implementing-powers-of-the-commission/ >167</a></li><li data-id=6471><a href=https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/ >168</a></li><li data-id=6476><a href=https://gdpr.eu/recital-169-immediately-applicable-implementing-acts/ >169</a></li><li data-id=6481><a href=https://gdpr.eu/recital-170-principle-of-subsidiarity-and-principle-of-proportionality/ >170</a></li><li data-id=6486><a href=https://gdpr.eu/recital-171-repeal-of-directive-95-46-ec-and-transitional-provisions/ >171</a></li><li data-id=6491><a href=https://gdpr.eu/recital-172-consultation-of-the-european-data-protection-supervisor/ >172</a></li><li data-id=6496><a href=https://gdpr.eu/recital-173-relationship-to-directive-2002-58-ec/ >173</a></li></ul></div></div><div class="col-xl-8 col-lg-12 single-content"><div class=gdpr-article data-id=6471> <span class=tag>40</span><h1 class="gdpr"><em>Recital 168</em><strong>Implementing acts on standard contractual clauses</strong></h1><p>The examination procedure should be used for the adoption of implementing acts on standard contractual clauses between controllers and processors and between processors; codes of conduct; technical standards and mechanisms for certification; the adequate level of protection afforded by a third country, a territory or a specified sector within that third country, or an international organisation; standard protection clauses; formats and procedures for the exchange of information by electronic means between controllers, processors and supervisory authorities for binding corporate rules; mutual assistance; and arrangements for the exchange of information by electronic means between supervisory authorities, and between supervisory authorities and the Board.</p><div class=rp4wp-related-posts><h3>Related Posts</h3><ul><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-169-immediately-applicable-implementing-acts/ >Recital 169 - Immediately applicable implementing acts</a></div></li><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-109-standard-data-protection-clauses/ >Recital 109 - Standard data protection clauses</a></div></li><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-167-implementing-powers-of-the-commission/ >Recital 167 - Implementing powers of the Commission</a></div></li></ul></div></div></div></div></div></div></div></div></div></div></div></div><footer id=footer><div class=container><div class=post-author-details-box><div class=post-author-details><h6>About GDPR.EU</h6><p> </p><p>GDPR.EU is a website operated by Proton Technologies AG, which is co-funded by Project REP-791727-1 of the Horizon 2020 Framework Programme of the European Union. This is not an official EU Commission or Government resource. The europa.eu webpage concerning GDPR can be found <a href=https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en target=_blank>here</a>. Nothing found in this portal constitutes legal advice.</p></div></div><div class=footer-top><div class=row><div class=col-sm-3> <br><h5>Getting Started</h5><br><div class=menu-deep-footer-column-1-container><ul class=fmenu><li id=menu-item-9315 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9315"><a href=https://gdpr.eu/what-is-gdpr/ >What is GDPR?</a></li><li id=menu-item-9316 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9316"><a href=https://gdpr.eu/fines/ >What are the GDPR Fines?</a></li><li id=menu-item-9317 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9317"><a href=https://gdpr.eu/checklist/ >GDPR Compliance Checklist</a></li></ul></div></div><div class=col-sm-3> <br><h5>Templates</h5><br><div class=menu-deep-footer-column-2-container><ul class=fmenu><li id=menu-item-9318 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9318"><a href=https://gdpr.eu/data-processing-agreement/ >Data Processing Agreement</a></li><li id=menu-item-9319 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9319"><a href=https://gdpr.eu/right-to-erasure-request-form/ >Right to Erasure Request Form</a></li><li id=menu-item-9320 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9320"><a href=https://gdpr.eu/privacy-notice/ >Writing a GDPR-compliant privacy notice</a></li></ul></div></div><div class=col-sm-3> <br><h5>Technical Review</h5><br><div class=menu-deep-footer-column-3-container><ul class=fmenu><li id=menu-item-9321 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9321"><a href=https://gdpr.eu/data-protection-officer/ >Data Protection Office Guide</a></li><li id=menu-item-9322 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9322"><a href=https://gdpr.eu/email-encryption/ >GDPR and Email</a></li><li id=menu-item-9323 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9323"><a href=https://gdpr.eu/companies-outside-of-europe/ >Does GDPR apply outside of the EU</a></li></ul></div></div><div class=col-sm-3> <br><h5>About Us</h5><br><p>GDPR.eu is co-funded by the <a href=https://ec.europa.eu/programmes/horizon2020/en/ >Horizon 2020</a> Framework Programme of the European Union <strong>and operated by Proton AG</strong>.</p></div></div></div><div class=formz><p> </p><p><strong>GDPR Forms and Templates</strong></p><p> <a href=/data-processing-agreement/ ><i class="far fa-file-alt"></i> <strong>Data Processing Agreement</strong> <i class="fa fa-chevron-right"></i></a> <a href=/right-to-erasure-request-form/ ><i class="far fa-file-alt"></i> <strong>Right to Erasure Request Form</strong> <i class="fa fa-chevron-right"></i></a> <a href=/privacy-notice/ ><i class="far fa-file-alt"></i> <strong>Privacy Policy</strong> <i class="fa fa-chevron-right"></i></a></p></div><p> </p><p class=copyright>漏 2024 Proton AG. All Rights Reserved.</p><p class=text-center> <br> <a href=https://gdpr.eu/terms-and-conditions/ >Terms and Conditions</a>     <a href=https://gdpr.eu/privacy-policy/ >Privacy Policy</a></p></div></footer></div><div id=compliance_a style=display:none;> <a href=# class="close fa fa-times"></a> <img src=https://gdpr.eu/wp-content/themes/gdpr/images/gdpr_graphic.svg alt="GDPR Graphic"><p>GDPR compliance is easier with <strong>encrypted email</strong></p> <span><a target=_blank href="https://proton.me/business/gdpr?ref=gdpreu">Learn more <i class="fa fa-chevron-right"></i></a></span></div> <script>var cnArgs = {"ajaxurl":"https:\/\/gdpr.eu\/wp-admin\/admin-ajax.php","hideEffect":"fade","onScroll":"no","onScrollOffset":"100","cookieName":"cookie_notice_accepted","cookieValue":"true","cookieTime":"2592000","cookiePath":"\/","cookieDomain":"","redirection":"1","cache":"1","refuse":"yes","revoke_cookies":"0","revoke_cookies_opt":"automatic","secure":"1"};</script> <script src="https://gdpr.eu/wp-content/cache/minify/6fdea.js"></script> <script>Main.boot( [] );</script> <script src=https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js></script> <div id=cookie-notice role=banner class="cn-bottom bootstrap" style="color: #fff; background-color: #000;" aria-label="Cookie Notice"><div class=cookie-notice-container><span id=cn-notice-text>We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.</span><a href=# id=cn-accept-cookie data-cookie-set=accept class="cn-set-cookie cn-button bootstrap button">Ok</a><a href=# id=cn-refuse-cookie data-cookie-set=refuse class="cn-set-cookie cn-button bootstrap button">No</a><a href=https://gdpr.eu/privacy-policy/ target=_blank id=cn-more-info class="cn-more-info cn-button bootstrap button">Privacy policy</a></div><div class=cookie-notice-revoke-container><a href=# class="cn-revoke-cookie cn-button bootstrap button">Revoke cookies</a></div></div> <script defer src=https://gdpr.eu/wp-content/cache/autoptimize/js/autoptimize_5dd90da4735596921829dacc461fe36f.js></script></body></html>