On October 9, 2026, the Belgian Data Protection Authority (APD) issued a decision (available in French here) finding that a data exporter’s failure to conduct a Transfer Impact Assessment (TIA) rendered its EU Standard Contractual Clauses (SCCs) invalid. For companies sending personal data outside the EU, the message is clear: signing SCCs is only the first step. Without a TIA, a transfer of EU personal data to the U.S. may lack a valid transfer mechanism, and a vendor’s security measures will … [Read more] about Belgian Data Protection Authority: EU Standard Contractual Clauses Are Invalid Without a Transfer Impact Assessment
