Practical guidance for UK commercial organisations on transferring personal data internationally under the UK GDPR


Published by a ³ÉÈËÓ°Òô Risk & Compliance expert
Practice notes

Practical guidance for UK commercial organisations on transferring personal data internationally under the UK GDPR


Published by a ³ÉÈËÓ°Òô Risk & Compliance expert

Practice notes
imgtext

This Practice Note is intended for in-house lawyers and privacy and compliance professionals in private sector commercial organisations in the UK. It provides guidance on how to manage international transfers of personal data and explains the legal and practical challenges organisations face relation to international data transfers. It reflects ICO guidance on international transfers, including in relation to transfer risk assessments (TRAs).

This Practice Note is not intended for public sector organisations.

This Practice Note reflects the United Kingdom General data protection Regulation (UK GDPR) and Information Commissioner’s Office (ICO) guidance on International transfers, including ICO guidance on Transfer risk assessments. See also Practice Note: How to complete a transfer risk assessment—international data transfer—ICO methodology.

This Practice Note also signposts key EU guidance in relation to transfer impact assessments (TIAs), which is the EU equivalent of a transfer risk assessment. See also Practice Note: How to complete a transfer impact assessment—international data transfer—EU methodology and Precedents: Transfer impact assessment—personal data—EU methodology, which reflects the EU approach to TIAs and International data transfer—data

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Personal data definition
What does Personal data mean?

Personal data means data relating to a living individual who can be identified from such data, either alone or with other information in the data controller’s possession. It includes opinions about, and intentions in relation to the data subject.

Read more

Popular documents

UK GDPR—the basics

UK GDPR—the basicsThis Practice Note explains, in simple terms, the key features of the UK General Data Protection Regulation (UK GDPR). See also Precedent: Data protection quick reference guide.This Practice Note is intended for non-privacy specialists and there are separate, more detailed,

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may not

Data subject access request form

Data subject access request formPlease complete this form if you wish to request access to your personal data. You do not have to use this form, but it will help us to deal with your request as quickly and effectively as possible if you do.You can also use this form if you are requesting access to

Data protection officer—DPO—job description and role profile

Data protection officer—DPO—job description and role profile1DPO detailsName of organisation[Insert name of organisation]Name of DPO[Insert name]Reports to[Insert name and/or position]Full time/part time[Insert]Details of any other roles held within the organisation[Insert details of any other roles