Engineers ask whether encrypting personal data before it leaves the EEA can help address transfer risks to a challenging third country. Which authority’s transfer guidance is commonly used to frame that supplementary-measures analysis?
Select an answer to reveal the explanation.
Short Explanation
When people ask “does encrypting before export help?”, the practical playbook many teams open is EDPB transfer guidance—not a tourism brochure. Encryption can be a strong supplementary measure when keys stay out of the bad-access zone. Pair the tech with the legal analysis the EDPB themes describe.
Full Explanation
The European Data Protection Board has issued recommendations on measures that supplement transfer tools, including technical measures such as strong encryption where the exporter retains effective control of keys. Those materials help organisations evaluate whether proposed mitigations actually address identified third-country risks. OECD Guidelines and unrelated national materials do not replace that analysis, and SCCs do not forbid appropriate supplementary encryption.