Transfer Impact Assessment Report – Screening, Destination Laws, Transfer Risks, Supplementary Measures, Sign-off and Live Workbook

Description

What the report contains

You already have your heat map, your top risks and your findings for free. This is the full transfer impact assessment behind them, written up as the record a supervisory authority, an auditor or a customer’s due diligence team expects to see.

• The screening, recorded. Whether this is a restricted transfer, whether adequacy or an Article 49 exception covers it, and which rules apply (EU GDPR, UK GDPR or both), with the verdict and your screening note.
• The transfer, mapped. Exporter and importer and their roles, the SCC module or UK transfer tool, the personal data and people concerned, the format of the data, how it is accessed, the destination countries and onward transfers: EDPB steps 1 and 2.
• Laws and practice in the destination. Every question answered yes, partly or no, with your explanation and source: EDPB step 3, and the UK “not materially lower” test.
• Every transfer risk, highest level first. With its owner, the harm to people it would cause, the safeguards already in place, its likelihood, severity and level, and the rationale for the rating.
• The supplementary measures by due date. For each risk: the decision, the planned actions, the technical, contractual and organisational measures it relies on, the owner, the due date and the level before and after.
• The effectiveness check. Whether High or Critical risk remains once the supplementary measures are in place, and so whether the transfer tool can be relied on for this transfer.
• Advice and sign-off. The DPO’s advice and whether it was followed, the importer’s input under SCC Clause 14(c), the outcome, who approved it and when, and the re-evaluation date.
• Every finding, with what closes it. Each gap between your TIA and what the transfer rules ask for, and the document that closes it.
• An AI-assisted analysis and 30/60/90-day roadmap. A one-sentence verdict, where you stand and what it means, a statement for senior management, three to five priorities and a roadmap, written from your own answers and checked automatically against them.

The live Excel workbook

A transfer impact assessment has to be re-evaluated when the transfer or the destination’s law changes, so you also get it as a working file, not a static export:

• Dashboard: the process score, level and heat maps, recalculated as you edit.
• Criteria: your scales, band ceilings and appetite line, which drive every calculation.
• Scope and Risk register: change a likelihood or impact and the level, band and appetite check update.
• Treatment plan: decisions, actions, owners, due dates, targets and acceptance.
• TIA record: the screening, the transfer, the destination answers and the sign-off as a working record you can keep editing, alongside the register and the list of supplementary measures your risks rely on.

How to get it

1. Run the free transfer impact assessment tool: screen the transfer, map it, answer the destination questions, rate the risks, choose the supplementary measures and sign it off.
2. Choose Get the full report. The report and workbook are in your account straight away, and they rebuild from your latest answers whenever you download them.

Built for exporters sending personal data out of the EEA or the UK under the EU Standard Contractual Clauses, binding corporate rules, the UK IDTA or the UK Addendum. One TIA covers one transfer, or a set of similar transfers to the same importer.

One payment covers this assessment. Edit it as often as you like and download the updated report at no extra cost. This is a self-assessment built from the information you enter; it is not a certification, an audit opinion or legal advice.