Document the Chapter V mechanism and destination-risk: Which evidence is most decisive?
A permissible international transfer requires evidence of the applicable Chapter V mechanism and relevant destination assessment.
The question
Under GDPR Chapter V, a research administrator plans to send identifiable participant records from the EU to a cloud provider in a third country. The contract mentions confidentiality, but the transfer mechanism and destination assessment are missing. Which evidence is most decisive?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Add encryption requirements to the existing confidentiality agreement.Encryption can reduce risk, but a contract and encryption alone do not establish that every international transfer is permitted.
- Obtain the provider’s statement that it follows European privacy principles.A general privacy statement lacks the specific adequacy or safeguard analysis needed to support a Chapter V transfer.
- Confirm the provider’s headquarters are in the EU.EU headquarters do not establish where processing or access occurs, nor do they demonstrate an applicable Chapter V transfer safeguard.
- Document the Chapter V mechanism and destination-risk assessment. ✓This evidence identifies the applicable transfer safeguard and evaluates destination conditions relevant to the proposed international disclosure.
The trap
Ask which Chapter V mechanism applies and what destination conditions were assessed; vendor contracts alone are insufficient. How to remember it
A permissible international transfer requires evidence of the applicable Chapter V mechanism and relevant destination assessment.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Document the identification purpose and Article 9 basis: Which evidence should resolve approval? →
- Map copies, define retention, and test the erasure-request: Which evidence should resolve approval of the →
- Document a suitable lawful basis and assess purpose: Which approach satisfies the stated constraint? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.
