Processing personal data in the EU for US-based companies

About This Course

US-based companies that process personal data from the EU face unique challenges in complying with European data protection regulations such as the GDPR and navigating the implications of the Schrems II ruling. This course helps participants understand these complexities and equips them with the knowledge and skills required to implement effective data processing and compliance strategies. Participants gain an in-depth understanding of EU data protection requirements, legal concepts, and practical applications, enabling them to confidently manage EU personal data, ensure compliance with relevant regulations, and mitigate potential risks.

What You Will Learn

• Understand GDPR territorial scope and obligations for US-based organisations
• Navigate international data transfer mechanisms post-Schrems II
• Implement Standard Contractual Clauses and assess the EU-US Data Privacy Framework
• Set up Records of Processing Activities and breach notification procedures for cross-border operations
• Identify and avoid common compliance pitfalls based on real enforcement cases

Prerequisites

• Working knowledge of US business operations that involve EU data
• Basic awareness of data protection concepts
• No prior GDPR expertise required