The standard contractual clauses(1) (SCCs) for the transfer of personal data outside the EU, submitted by the European Commission for public consultation from 12 November until 10 December 2020, unfortunately represent to a great extent the level of confusion, complexity and contradictions of the current privacy regulations. The GDPR, contrary to the Commission’s intentions, may discourage businesses, both in the EU and outside the EU, from operating in accordance with such rules, and at the same time may increase the level of distrust of citizens with regard to what, on paper, is claimed to protect their fundamental rights and freedoms.