Finland queries businesses about their Schrems II compliance
The Finnish Data Protection Authority has recently sent enquiries to companies in Finland about their data transfers to the US in the aftermath of the recent CJEU Schrems II ruling.
According to reports, the letters sent seek the following information: are there transfers to the US that rely on the Privacy Shield or EU Commission's Standard Contractual Clauses, and if yes, what measures have the companies taken to comply with Schrems II, and what kind of additional guidance do organisations expect from the DPA?
Finland recently appointed a new Ombudsman, Anu Talus, who has a doctorate in law and has served as Deputy Data Protection Ombudsman since August 2019. She will start in the position on I November when the current DPA Reijo Aarnio retires.