Council of Europe issues revised draft model contractual clauses for international data transfers under the Covention 108+.

The Council of Europe ('CoE') released, on 3 March 2023, a revised version of the draft Model Contractual Clauses for the Transfer of Personal Data from Controller to Controller ('MCCs'), under the Amending Protocol to the Convention for the Protection of Individuals with regard to the Processing of Personal Data ('Convention 108+').

In particular, the revised draft MCCs include new definitions, including for the terms 'data breach', 'data exporter', and 'data importer', and amend existing clauses, such as those on:

1. due diligence and cooperation between the data importer and the data exporter;
2. data security;
3. onward transfers; and
4. redress for data subjects.