Template
Transfer Impact Assessment (TIA) Template
This template is the instrument that records and evidences a Transfer Impact Assessment (TIA): the documented assessment an organization completes before transferring personal data to a third country in reliance on an Article 46 transfer tool, to confirm that the tool secures, in the destination country, a level of protection essentially equivalent to that guaranteed within the EEA. It operationalizes the six-step methodology in the EDPB Recommendations 01/2020 on measures that supplement transfer tools (attributed; the methodology is articulated by the European Data Protection Board, not reproduced verbatim here) and evidences compliance with GDPR Chapter V (Regulation (EU) 2016/679, Articles 44 to 49).
- Type
- Template
- Version
- 1.0.3
- Date
- 2026-07-13
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material processing, jurisdiction, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- How to use this template
- Section 1. Know the transfer (Step 1: mapping)
- Section 2. Identify the transfer tool (Step 2)
- Section 3. Assess the effectiveness of the tool in the destination (Step 3)
- Section 4. Identify and adopt supplementary measures (Step 4)
- Section 5. Procedural steps (Step 5)
- Section 6. Re-evaluation (Step 6)
- Section 7. Outcome, decision, and sign-off
- Framework alignment
- Limitations
Frameworks it maps to
- GDPR (Regulation (EU) 2016/679)
- GDPR
- EDPB Recommendations 01/2020
- EDPB Guidelines 07/2022
- UK GDPR
- ISO/IEC 27701:2025
Related documents
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Cross-Border Data Flow Registerprivacy
- DPIA (Data Protection Impact Assessment) Templateprivacy
- Record of Processing Activities Templateprivacy
- Pseudonymization and Anonymization Standardprivacy
- European Union Privacy Regulatory Requirementsprivacy
- Privacy Management Programme Charterprivacy
Next
All Documents