What is a data transfer mechanism? Give two examples.

• A. A method to store data securely within a single country.
• B. A method to legally transfer data across borders; examples: Standard Contractual Clauses (SCCs) and UK IDTA.
• C. A document describing data processing activities.
• D. A framework for data backup procedures.

Answer: (B)

A data transfer mechanism is a legally recognized method that enables moving personal data across borders while ensuring appropriate safeguards for that data. It ensures that when data travels from one country to another, the receiving party remains bound to protections that meet the data protection rules in force, such as GDPR or UK GDPR. Two common examples are Standard Contractual Clauses, which are pre-approved contractual terms that bind both the data exporter and importer to protect the data, and the UK International Data Transfer Agreement, which provides a structured framework for transfers from the UK to other countries. These mechanisms are specifically about lawful, safeguarded cross-border transfers. By contrast, storing data securely within a single country, a document describing data processing activities, or a framework for data backups address localization, documentation, or resilience rather than the cross-border transfer process.