# Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176) (Text with EEA relevance) (revoked), Division c: Transfers between Controllers

Extent: E+W+S+N.I.
Status: repealed

For transfers between controllers, the recipient controller need not be a Privacy Shield organization or have an independent recourse mechanism. The Privacy Shield organization must enter into a contract with the recipient third-party controller that provides for the same level of protection as is available under the Privacy Shield, not including the requirement that the third party controller be a Privacy Shield organization or have an independent recourse mechanism, provided it makes available an equivalent mechanism.

---
Source: https://www.legislation.gov.uk/eudn/2016/1250/annex/II/division/III/division/10/division/c (the official version)
Page: https://openlegislation.uk/eu-decision-2016-1250/annex-II/division-III/division-10/division-c
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.