Many organizations use European Union Standard Contractual Clause to govern personal data transfer from European Economic Area to other countries. Some organizations have ongoing transfers that started beforehand, which can be made under old SCCs until grace period expires.