On October 9, 2026, the Belgian Data Protection Authority (APD) issued a decision (available in French here) finding that a data exporter’s failure to conduct a Transfer Impact Assessment (TIA) rendered its EU Standard Contractual Clauses (SCCs) invalid. For companies sending personal data outside the EU, the message is clear: signing SCCs is only the […]
EU Standard Contractual Clauses
Dutch DPA Fines Taxi App €100M Over Unlawful Transfers of Personal Data to Russia, Despite Use of EU Standard Contractual Clauses
On April 1, 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) imposed a €100 million fine on MLU B.V., the Dutch operator of the Yango taxi app. The AP found that personal data of EU users was unlawfully transferred to affiliated entities in Russia, despite the formal use of the EU Standard Contractual Clauses […]