Securiti launches Gencore AI, a holistic solution to build Safe Enterprise AI with proprietary data - easily

View
Contact Us See a demo

Cross-Border Data Transfers Under GDPR: Lessons From Uber’s €290 Million Fine

This infographic will provide you with:

  • Measures and processes your organization can adopt to ensure compliance with the GDPR’s provisions related to cross-border data transfers;
  • Appropriate alternatives to adopt in case the initially recommended safeguards and measures cannot be implemented;
  • Appropriate Securiti modules and products that can help your organization comply with various necessary international data transfer obligations per the GDPR.

DOWNLOAD INFOGRAPHIC

Award-winning technology, built by a proven team, backed by confidence. Learn more.

The Dutch DPA recently fined Uber a mammoth €290 million ($324 million), citing its violation of GDPR provisions related to cross-border data transfers. While Uber has since made public its intention to appeal the fine, this episode should reiterate the importance of adhering to the GDPR’s strict international data transfer obligations for others.

Securiti’s detailed infographic illustrates the critical steps all organizations can take to ensure their compliance with the GDPR’s cross-border data transfer requirements.

This infographic not only informs but also provides practical guidance on measures that can be implemented at once, thereby elevating an organization’s ability to continue their cross-border data transfers in a GDPR-compliant manner effectively.

Download Infographic Now
Cross-Border Data Transfers Under GDPR

Frequently Asked Questions

Here are some of the commonly asked questions related to the fine imposed by the Dutch DPA on Uber in August 2024:

Under the GDPR, organizations may only transfer data outside the EU's jurisdiction by relying on three mechanisms. These include an adequacy decision, appropriate safeguards such as binding corporate rules (BCRs), standard contractual clauses (SCCs), or specific derogations, which can only be used in the case of non-repetitive transfers. 

This investigation began after French Uber drivers complained about the company mishandling their sensitive data. The French data protection authority began its initial investigation. Then, it forwarded the complaint to the Dutch DPA since all such complaints must be forwarded to the DPA of the EU country where the alleged offending company is headquartered, which is the Netherlands in the case of Uber. 

Yes, Uber has disagreed with the decision and their plans to appeal the Dutch DPA's fine arguing that they had appropriate data protection mechanisms in place. Additionally, they contend that the transfer's legal basis was within the regulatory provisions. 

All-in-One Solution For Your Business Needs

The Multi-disciplinary practice to grow trust-equity of your brand and comply with privacy regulations

The NJDPA does not grant a private right of action, meaning individuals cannot sue under the law. Businesses are allowed a 30-day cure period to address violations. Noncompliance penalties are $10,000 for a first violation and $20,000 for each subsequent violation. View More

Navigating the New Jersey Data Privacy Act (NJDPA): Key Details

Download the infographic to learn key details about the New Jersey Data Privacy Act (NJDPA) and simplify your compliance journey with Securiti.

ICDPA View More

Navigating the Indiana Consumer Data Protection Act (ICDPA): Key Details

Download the infographic to learn key details about the Indiana Consumer Data Protection Act (ICDPA) and simplify your compliance journey with Securiti.

Navigating the Tennessee Information Protection Act View More

Navigating the Tennessee Information Protection Act (TIPA): Key Details

Download the infographic to learn key details about the Tennessee Information Protection Act (TIPA) and simplify your compliance journey with Securiti.

Cyber Security Legislative Package (CSLP) 2024 View More

Cyber Security Legislative Package (CSLP) 2024: A New Era for Cyber Security in Australia

Download the infographic to gain insights into Australia’s Cyber Security Legislative Package (CSLP). Learn more about how to ensure swift compliance.

A Pathway To AI Governance View More

A Pathway To AI Governance

This infographic provides a detailed overview of why AI governance is so important for organizations and how it directly translates into business success.

View More

Microsoft 365 Copilot Readiness Checklist

This infographic lists the top security challenges orgs face in their Microsoft Sharepoint environment and the mitigation strategies to overcome them, enabling secure Copilot rollout.

View More

Saudi PDPL Mapping: A Step-by-Step Compliance Roadmap

Download the Saudi PDPL Mapping infographic for a step-by-step compliance roadmap. Simplify your compliance journey with Securiti PDPL Compliance.

View More

OWASP Top 10 for LLM Applications: Essential Security Insights

Explore the 10 key vulnerabilities of LLMs, including prompt injection, data poisoning, and sensitive information leaks, with essential mitigation steps.

Australia Privacy Amendment Bill View More

Australia Privacy Amendment Bill 2024

Gain insights into the major reforms to the Privacy Act 1988 brought by the Australian Government’s Privacy and Other Legislation Amendment Bill 2024. Learn more.

Key Healthcare Laws in Canada View More

Understanding Key Healthcare Laws in Canada: What You Need to Know

Securiti's infographic provides a detailed overview of each organization's specific obligations under Canada’s various healthcare laws. Sign up to access it now.

What's
New