This text is a practical guide to conducting a Transfer Impact Assessment (TIA), a requirement under the General Data Protection Regulation (GDG or GDPR) when transferring personal data outside the European Economic Area (EEA) to countries without an adequate level of protection. The manual, prepared by CNIL in response to recommendations from the European Data Protection Board (EDPB), provides a methodology for data exporters to assess whether the level of protection in the recipient country is substantially equivalent to that within the EEA. The TIA procedure includes six detailed steps, including mapping the transfer, identifying the Article 46 AVG transfer instruments used, assessing local laws and practices, and identifying, implementing and periodically reassessing any additional measures. The guide emphasizes the exporter's responsibility to ensure compliance, with necessary assistance from the importer, and provides guidance on both the preparatory phase and the implementation of the assessment itself.
