cross-border data transfers in light of Standard Contractual Clauses approved by the EU Commission. EDPB restrictions on cross-border data transfers for controllers and processors do not apply to data subjects. EU Commission is developing SCCs for companies subject to Art.