III.10.c.i—Controller-to-Controller Transfer Requirements
>Control Description
For transfers between controllers, the recipient controller need not be a participating organization or have an independent recourse mechanism. The participating organization must enter into a contract with the recipient third-party controller that provides for the same level of protection as is available under the EU-U.S. DPF, not including the requirement that the third party controller be a participating organization or have an independent recourse mechanism, provided it makes available an equivalent mechanism.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.