Practise vocabulary for Standard Contractual Clauses, adequacy decisions, Binding Corporate Rules, and GDPR Chapter V.
0 / 5 completed
1 / 5
An EU adequacy decision means:
Adequacy decisions (GDPR Article 45) currently cover countries including UK, Japan, Canada, Switzerland, New Zealand, and the USA (under the EU-US Data Privacy Framework as of 2023). Data can flow to these countries as freely as within the EU.
2 / 5
Standard Contractual Clauses (SCCs) are used when:
SCCs (GDPR Article 46) are the most commonly used transfer mechanism: Module 1 (controller-to-controller), Module 2 (controller-to-processor), Module 3 (processor-to-processor), Module 4 (processor-to-controller). They cannot be modified — they must be used as-is to maintain their pre-approved status.
3 / 5
Binding Corporate Rules (BCRs) are primarily used by:
BCRs are internal codes of conduct for multinational groups. They require supervisory authority approval (lengthy process) but then permit unlimited intra-group transfers globally. More secure than SCCs for complex multinational structures but significant overhead to implement.
4 / 5
A Transfer Impact Assessment (TIA) is required when:
The Schrems II ruling (CJEU 2020) invalidated Privacy Shield and made TIAs mandatory. Exporters must assess: does destination country law (especially government access powers) undermine the protection SCCs provide? If yes, supplementary measures are needed.
5 / 5
The phrase 'data may be transferred to the USA under the EU-US Data Privacy Framework adequacy decision' means:
The EU-US DPF (adopted July 2023) is a self-certification mechanism for US companies. Unlike UK or Swiss adequacy (general), US adequacy only applies to DPF-certified organisations. Non-certified US recipients still require SCCs or other Article 46 safeguards.
What does the "Cross-Border Data Transfer Vocabulary" exercise practise?How many questions are in this exercise?
This exercise has 5 questions, each multiple-choice with a full explanation shown after you answer.
What English level is this exercise for?
This exercise is tagged Intermediate. If the vocabulary feels difficult, browse the Data Privacy category page for an easier module to start with.
Is this exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is free with no account, sign-up, or paywall.
Do I get feedback if I answer incorrectly?
Yes — whichever option you choose, right or wrong, you'll immediately see an explanation clarifying the correct term and why the other options don't fit.
Can I retry this exercise?
Yes — once you finish all the questions, a "Try again" button on the results screen resets the exercise so you can practise as many times as you like.
Do I need an account to track my progress?
No account is required. Your progress bar and score for this session are tracked in the browser as you go, but nothing is saved once you leave the page.
Is "Cross-Border Data Transfer Vocabulary" part of a larger series?
Yes — it's one exercise in the Data Privacy category on CoderSlingo. See the category page for the full list of related exercises on similar terminology.
Can I link directly to this exercise?
Yes — this exercise has its own permanent URL, so you can bookmark it or share the link directly with a colleague or study partner.
Where can I find more exercises like this one?
See the Data Privacy category page for related exercises, or browse the main Exercises hub for other IT English topics.