UK GDPR—transfers of personal data internationally and to international organisations
UK GDPR—transfers of personal data internationally and to international organisations

The following Information Law practice note provides comprehensive and up to date legal information covering:

  • UK GDPR—transfers of personal data internationally and to international organisations
  • Frozen GDPR
  • Summary
  • Key guidance
  • Obligations under the UK GDPR
  • Identifying a transfer that is restricted by Chapter V
  • Is personal data involved?
  • Does the UK GDPR apply?
  • What is the scope of the Chapter V restriction?
  • What is a ‘restricted transfer’ in practice?
  • More...

This Practice Note introduces the general prohibition under Chapter V of the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) on the transfer of personal data outside of the UK or to an international organisation.

For more information on the data protection regime under the UK GDPR, see Practice Notes:

  1. The UK General Data Protection Regulation (UK GDPR)

  2. UK GDPR—extra-territorial reach

For a comparison between the position under the UK GDPR and the preceding data protection regime in the UK governed by the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR), see Practice Note: The UK General Data Protection Regulation (UK GDPR)—Navigator.

For guidance on equivalent laws under the EU GDPR regime, see Practice Note: EU GDPR—transfers of personal data internationally and to international organisations.

For a comprehensive introduction to UK data protection law, collating key practical guidance, see: Data protection toolkit.

Frozen GDPR

Organisations transferring personal data that is subject to the special ‘Frozen GDPR’ regime under Article 71 of the Withdrawal Agreement will need to consider how to comply with the international transfer requirements under that regime, which is distinct from the UK GDPR. See Practice Note: Brexit—implications for data protection—Post-implementation period: The Frozen GDPR for background on Article 71 of the Withdrawal Agreement and the data that is subject to that regime.

While the Frozen GDPR is outside the scope of this

Popular documents