Standard contractual clauses, Module One (controller to controller), Clauses 17 and 18: governing law and forum (Commission Implementing Decision (EU) 2021/914, Annex, Clauses 17 and 18)
When an EU holder uses the standard clauses to send personal data to a US buyer, the clauses themselves are governed by a member state's law and heard by its courts, whatever law and forum the licence names for the rest of the deal.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“These Clauses shall be governed by the law of one of the EU Member States, provided such law allows for third-party beneficiary rights. ... Any dispute arising from these Clauses shall be resolved by the courts of an EU Member State.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide