SCCs are a contract that can be used for data transfers between EU and non-EU countries.

The SCC are a form of appropriate safeguards that can be used when there is no adequacy decision according to article 45 of the GDPR. They are decided by the European Commission according to article 46 of the GDPR. Organisations can use them when transferring data to a third country meaning a country outside of the EU/EEA without an adequacy decision.

The EU Commission has on 12 November 2020 published new SCCs in view of the Schrems II judgement. The new SCCS is in a draft format subject to consultation.