Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies
Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies
Paragraph 2.3.2 Data accuracy and minimisation principles
18. The international agreement must specify that the data transferred and further processed must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are transmitted and further processed.
19. In practice, this data minimisation principle is important to avoid the transfer of personal data when they are inadequate or excessive.
20. Moreover, data should be accurate and up to date, having regard to the purposes for which they are processed. An international agreement must therefore provide that the transferring party will ensure that the personal data transferred under the agreement is accurate and, where applicable, up to date. In addition, the agreement should provide that, if one of the parties becomes aware that inaccurate or out of date data has been transmitted or is being processed, it must notify the other party without delay. Finally, the agreement should ensure that, where it is confirmed that data transmitted or being processed is inaccurate, each party processing the data shall take every reasonable step to rectify or erase the information.