The Commissioner may issue a document specifying standard data protection clauses which the Commissioner considers are capable of securing that the data protection test set out in Article 46 of the UK GDPR or section 75 of this Act (or both) is met in relation to transfers of personal data.
The Commissioner may issue a document that amends or withdraws a document issued under subsection (1).
A document issued under this section—
Before issuing a document under this section, the Commissioner must consult the Secretary of State and such of the following as the Commissioner considers appropriate—
After a document is issued under this section—
If, within the 40-day period, either House of Parliament resolves not to approve the document then, with effect from the end of the day on which the resolution is passed, the document is to be treated as not having been issued under this section (so that the document, and any amendment or withdrawal made by the document, is to be disregarded for the purposes of Article 46(2)(d) of the UK GDPR).
Nothing in subsection (6)—
The Commissioner must publish—
The Commissioner must keep under review the clauses specified in a document issued under this section for the time being in force.
In this section, "the 40-day period" means—
In calculating the 40-day period, no account is to be taken of any whole days that fall within a period during which Parliament is dissolved or prorogued or during which both Houses of Parliament are adjourned for more than 4 days.
In this section, "trade association" includes a body representing controllers or processors.