UK GDPR and EU GDPR—transfers of personal data internationally and to international organisations

The following Information Law practice note provides comprehensive and up to date legal information covering:

  • UK GDPR and EU GDPR—transfers of personal data internationally and to international organisations
  • In brief
  • Chapter V of the EU and UK GDPR regimes
  • Introduction to Chapter V of the GDPR regimes
  • Topics covered in this Practice Note
  • Laws not covered in this Practice Note
  • Obligations under the GDPR regimes
  • Identifying a restricted transfer
  • Making otherwise restricted transfers
  • Adequacy decisions and adequacy regulations
  • More...

UK GDPR and EU GDPR—transfers of personal data internationally and to international organisations

This Practice Note introduces the general prohibition under Chapter V of the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) and Chapter V of United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) on the transfers of personal data outside of the EEA or UK (respectively) or to international organisations.

For higher-level introductions to UK and EEA data protection laws, see Practice Notes: Data protection law—new starter guide and Introduction to the EU GDPR and UK GDPR. The Data protection toolkit collates further general guidance on those regimes and is a recommended starting point for research.

In brief

Data protection laws in both the EEA (the EU plus Iceland, Norway, and Liechtenstein) and UK seek to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly. To help ensure that, both EEA and UK data protection laws impose a large number of obligations on those ‘processing’ personal data (and on controllers of such processing).

One of the key protections under both EEA and UK data protection laws is a restriction on the transfer of personal data to other jurisdictions (ie outside the UK under UK data protection law, or outside the EEA under EEA data protection laws) or to organisations governed by public international law

Popular documents