Data Transfers and Security Measures
This section enables you to create data transfers and security measures specific to your processing activity.
To create data transfers and security measures on a processing activity:
1. Open the property page of a processing activity.
2. Select the Details tab.
Specifying data transfers on a processing activity
When creating a data transfer, you can specify:
• the transfer name
• the recipient (legal entities and subcontractors)

The recipient country is automatically deduced from the main establishment of the entity.
• the sender
• the data categories and data subjects involved
• the safeguards applied
• whether data is outsourced
• whether data is sold/bought.
Specifying security measures on a processing activity
To create a group of security measures specifically applicable to a processing activity:
2. In the property page of a processing activity, select the Details tab.
3. Scroll down to the Security Measures section and select the tab corresponding to the type of security measures:
• Technical measures
• Organizational measures
• Certification systems
4. Click New.
5. In the Subject field enter a general naming for your group of security measures.
6. From the Security Measures drop-down list, select the individual security measures you need for your processing activity.
7. Enter a description.
8. Select the Mitigation level intended through this group of security measures.
Giving a compliance score for transfers and security measures
The GDPR team can later give a global compliance score for this section based on the above mentioned information. To do so:
1. From the Details tab of the processing activity page, scroll down to the section corresponding to transfers and security measures.
2. Select a value from the Data Transfers & Security Measures Compliance level drop-down menu.