¶¶Òõ¶ÌÊÓƵ

1. Sub-processing: Required when the data importer may engage sub-processors for data processing activities

2. Special Categories of Data: Required when sensitive personal data is involved in the transfer

3. Data Transfer Impact Assessment: Required for high-risk transfers or when transferring to countries without adequate protection

4. Industry-Specific Requirements: Required when transfers involve regulated industries (e.g., healthcare, financial services)

5. Cross-Border Transfer Mechanisms: Required when multiple transfer mechanisms or jurisdictions are involved

6. Data Minimization and Storage Limitations: Optional detailed provisions on data retention and minimization practices

7. Emergency Protocols: Optional procedures for handling urgent data protection issues or breaches

1. Schedule 1 - Details of Processing Activities: Detailed description of the data transfers, including categories of data, purposes, and processing activities

2. Schedule 2 - Technical and Organizational Measures: Specific security measures and controls implemented by the parties

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities, if applicable

4. Schedule 4 - Transfer Impact Assessment: Documentation of the assessment of risks and safeguards for the transfer

5. Schedule 5 - Standard Contractual Clauses: Incorporation of relevant standard contractual clauses if used

6. Appendix A - Contact Details: Detailed contact information for data protection officers and responsible parties

7. Appendix B - Data Subject Rights Procedure: Specific procedures for handling data subject requests