Data Processing (DP) Terms
The Data Protection Terms together with the data transfer mechanisms below, outline procedures and responsibilities governing how personal data is to be processed in a contractual context.
DP Terms - Full (PDF)
DP Terms – Abridged (PDF)
International Data Transfers
When personal data is transferred to countries or territories that are not recognised under applicable law as offering an adequate level of data protection, Morgan Stanley leverages the following transfer mechanisms:
From the EEA to third countries
From the United Kingdom to third countries
From other jurisdictions to third countries
From Saudi Arabia to third countries
From Brazil to third countries
From Turkey to third countries
From the EEA to third countries
In the context of transfers from the European Economic Area (“EEA”) and/or Switzerland and/or the United Kingdom (“UK”) to a jurisdiction deemed not to have an adequate level of protection for Personal Information by competent data protection authorities, the Standard Contractual Clauses pursuant to the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 for the transfer of Personal Information to third countries pursuant to Regulation (EU) 2016/679 (“GDPR”) available here.
From other jurisdictions to third countries
For transfer in the context of other jurisdictions, the “Equivalent Transfer Clauses” available here -