Following the famous Schrems II ruling ('famous' if you are all-consumed in data protection at least!), the EU courts have told us that if the data protection laws in a recipient country are not essentially equivalent to those in the EU, we need to try to bridge that gap with "supplemental measures". 

So, just what are these mystical supplemental measures?

Well, the European Data Protection Board has published a draft set of recommendations to include some example supplemental measures. 

See our blog post (link below) for more information!