Getting Started with OneTrust's Free Schrems II Solutions

Thank you for signing up for OneTrust’s Free Schrems II Solutions! This document will walk you through how you can leverage our free vendor assessment templates, access additional helpful resources, and claim your 10 free vendor assessments-as-a-service through our Vendorpedia Chasing Services.

Access to Your Free Tenant

Check your email! You should have received an email from us with a link that will allow you to create your username and password to access the OneTrust application. Save that username and password and use it to access your tenant any time by navigating to free.onetrust.com.

Start Assessing Your Vendors

For this guide, we’ll jump straight into how we can help you start assessing your vendors relying on Standard Contractual Clauses (SCCs) to perform a case-by-case analysis of the validity of those SCCs. To learn more about the full Third-Party Risk Management module that you have access to, check out our resources on myOneTrust here.

Assessment Templates

As part of your free edition, you have access to 5 different templates that our DataGuidance® Research expert lawyers have built or updated following the Schrems II decision. These templates are designed for different purposes as described below. To view these templates in your tenant, click the main navigation menu and navigate to Third-Party Risk Management > Templates > Choose from Gallery.

Most Popular:

GDPR Cross-Border Transfer Assessment (External)

Designed to be sent directly to vendors to evaluate GDPR equivalency of the country, their internal controls & validity of SCCs, and onward transfers to sub-processors.

GDPR Cross-Border Transfer Assessment (Internal)

Designed to be used internally to: (1) identify the current transfer mechanism used for the vendor, (2) evaluate the adequacy of data protection in the third country where the vendor processes personal data (3) identify whether the vendor engages in onward transfers of data and assess whether that fourth country provides essentially equivalent data protection, and (4) determine whether we need to establish a different lawful transfer mechanism or to suspend transfers to the vendor.

Additional Templates:

NOYB Model Request to U.S. Importers with SCCs

This questionnaire is an adaptation of NOYB's "model request to US data importers if you still use SCCs ('case by case' analysis)."

NOYB Model Request to EU Providers with U.S. Ties

This questionnaire is an adaptation of NOYB's "model request to providers that process data in the EU/EEA but have US ties ('case by case' analysis)."

OneVendor 2.0

Holistic, multi-jurisdictional vendor assessment to ensure vendors are providing appropriate privacy & security protections for and beyond data transfers.

Follow the instructions in this myOneTrust article to learn how to send one of these assessments to a vendor through the OneTrust platform.

Request Your Free Chasing Services

Assessing vendors can be a burden, even with all the right tools. We have expert trained, in-house agents who will do the chasing of your vendors for you. Just tell us which vendors to assess, the template you’d like to use, and we’ll get the vendor to complete the assessment and deliver it into your OneTrust tenant. To take advantage of your 10 Free Vendor Chasing requests, please reach out to vendorpedia@onetrust.com to get connected with a dedicated Vendor Chasing Agent.

Get the Latest Schrems II Updates with DataGuidance® Research

Last but not least, you have free access to our DataGuidance® Research Research portal, powered by 40 in-house experts and a network of 500 legal contributors. You can access DataGuidance® Research at any time at dataguidance.com, and below are some helpful links to get the latest updates on Schrems II including news, opinion articles, DPA & EDPB updates, FAQs and more:

Have additional questions? Please visit myOneTrust or contact OneTrust Support using the Create a Case web form.