Documented adequacy or Chapter V safeguards: What evidence is missing?
A vendor contract and encryption do not alone authorize a third-country transfer; the organization needs documented GDPR Chapter V safeguards or adequacy.
The question
Under the EU GDPR, an employer sends candidate records from the EEA to a screening provider in a third country. The vendor contract and encryption are documented, but transfer safeguards are not. What evidence is missing?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Documented adequacy or Chapter V safeguards for the destination transfer. ✓The employer must assess and document an applicable adequacy route or safeguard, together with other Chapter V conditions.
- A processor clause stating the vendor will follow employer instructions.Processor instructions address roles and processing conduct, but they do not alone establish a lawful international transfer mechanism.
- Proof that the provider has an EU headquarters.The provider’s headquarters location does not itself establish that the specific third-country transfer has a valid GDPR Chapter V mechanism.
- A statement that encryption protects the records in transit.Encryption can reduce security risk, but it does not alone establish an applicable adequacy decision or transfer safeguard.
The trap
Separate three questions: role allocation, security, and international-transfer authorization. How to remember it
A vendor contract and encryption do not alone authorize a third-country transfer; the organization needs documented GDPR Chapter V safeguards or adequacy.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Assess the Article 9 exception and another lawful basis: Which procurement issue is decisive? →
- Verify the retention exception and process the rights: What should it do first? →
- Document an applicable lawful basis for the training: Which direct control is still missing? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.