What is not a compulsory pre-requisite before a company with headquarters in the EU transfers sensitive personal data to its Asian subsidiaries?
Self-certifying to Safe Harbor practices and reporting to Federal Trade Commission
Performing a risk assessment for the processing involved
Data subjects are notified
Assessing the country's adequacy
Submit