The Schrems II ruling has brought new requirements for transfer of personal data to non-secure third countries outside of the EU. In the light of the ruling, the European Data Protection Board (EDPB) has published recommendations on necessary actions in order to comply with the new requirements. The recommendations were definitively approved and published on 18 June 2021.