In What Form Should the Controller's Instructions Be Provided to the Processor?
ANSWER
According to Clause 7.1, "The processor shall process personal data only on documented instructions from the controller."
The SCCs do not specify the form in which instructions must be provided. Therefore, the controller may choose to communicate instructions in any form it considers appropriate (e.g., in writing or orally, via the internet, or through other means of communication), provided that those instructions are documented.
The above answer is based on an official document of the European Commission.
You can review it at: https://ec.europa.eu/info/sites/default/files/questions_answers_on_sccs_en.pdf
A translated version of this document is also available on our blog under the title: "Standard Contractual Clauses (SCCs) – Questions and Answers".
