When personal data is transferred to countries or territories that are not recognised under applicable law as offering an adequate level of data protection, Morgan Stanley leverages the following transfer mechanisms:
- In the context of transfers from the European Economic Area (“EEA”) and/or Switzerland and/or the United Kingdom (“UK”) to a jurisdiction deemed not to have an adequate level of protection for Personal Information by competent data protection authorities, the Standard Contractual Clauses pursuant to the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 for the transfer of Personal Information to third countries pursuant to Regulation (EU) 2016/679 (“GDPR”) available here.
- For transfer in the context of other jurisdictions, the “Equivalent Transfer Clauses” available here.