The Privacy Shield As explained in Practice Notes: The Privacy Shield [Archived] and UK GDPR and EU GDPR—transfers of personal data internationally and to international organisations, Chapter V (Transfers of personal data to third countries or international organisations) of Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), prohibits controllers and processors in EEA member states from transferring personal data to any territory outside the EEA unless the conditions laid out in Chapter V are complied with. On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU law. As explained further in Practice Note: Brexit—implications for data protection [Archived], during this implementation period, the GDPR applies in the UK and the UK generally continues to be treated as an EU (and EEA) state for EEA and UK data