Requirements before data transfers

Scope of this page

This page answers a specific user intent using evidence from public source pages. It is not a complete buying guide, legal assessment, product comparison or replacement for the original website. Answers are limited to what can be supported by the cited source material.

Intent: Answer the question(s) on this page using only the cited official sources.

Topic: Data Residency Ai Contracts

Last updated:

Primary source: https://aismartventures.com/posts/data-residency-in-ai-contracts-canadian-and-eu-founders

Quick Info

It is needed before sending data outside Quebec.

Purpose and usage

This page provides short, extractable answers for the topic above.

Key points

  • At which step does the EU-US Data Privacy Framework check play a role?: In the before-signing step, vendors should be verified against the EU-US Data Privacy Framework for EU data transfers.
  • What must an AI vendor contract include for data location records?: A signed DPA must be included to record where data lives and who can see it.

Terms and entities

Canonical definitions live on the Facts pages. This page only references them.

When is a privacy impact assessment needed for Quebec data?

It is needed before sending data outside Quebec.

At which step does the EU-US Data Privacy Framework check play a role?

In the before-signing step, vendors should be verified against the EU-US Data Privacy Framework for EU data transfers.

What must an AI vendor contract include for data location records?

A signed DPA must be included to record where data lives and who can see it.

Sources

  1. https://aismartventures.com/posts/data-residency-in-ai-contracts-canadian-and-eu-founders

Machine metadata