International transfers

This subtopic is intended for private sector commercial organisations in the UK and reflects the UK GDPR. It sets out the legal and practical challenges organisations face when transferring data outside the UK and suggests some risk management measures you may wish to adopt.

The data protection regime on international transfers

All transfers of personal data are subject to the general requirements of Assimilated Regulation (EU) 2016/679, UK General Data Protection Regulation (UK GDPR), eg you must:

•
have a lawful ground for processing that personal data—see Practice Note: How to process personal data lawfully
•
provide certain information to data subjects—see Practice Note: Privacy notices—information requirements, and
•
(where the transfer poses a high risk) complete a data protection impact assessment—see Practice Note: How to complete a data protection impact assessment—DPIA

Where you transfer the personal data internationally (outside the UK), you must also satisfy and comply with requirements in Chapter V of the UK GDPR (Transfers of personal data to third countries or international organisations).

To comply with these requirements, you should consider:

•
is the transfer caught by the data protection

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

Law Society publishes guidance on disability terminology and language

The Law Society of England and Wales has published guidance on disability terminology and language to support employers and employees in the workplace. The guide is aimed at ensuring that the legal profession is using the right words, phrases and acronyms when talking about disability.

SFO launches bribery investigation into defence firm Thales

The Serious Fraud Office (SFO) has initiated an investigation into suspected bribery and corruption involving the multi-national aviation and defence electronics group Thales. This probe is being conducted jointly with the French authority Parquet National Financier (PNF), with each agency operating within its respective jurisdiction. The investigation targets Thales Group, headquartered in Paris, whose UK subsidiary employs over 7,000 staff across 16 sites. SFO director, Nick Ephgrave QPM, highlighted the importance of international collaboration in combating corruption, emphasising the longstanding relationship between the SFO and PNF. The agencies have informed Thales of the investigation and are committed to rigorously pursuing all avenues in their inquiry into these serious allegations.

HM Treasury issues advisory on Oil Price Cap evasion tactics

HM Treasury (HMT)and the Office of Financial Sanctions Implementation (OFSI) have released an advisory concerning the Oil Price Cap (OPC) regime. The guidance specifically addresses evasion strategies involving the manipulation of product origin through the use of fabricated and falsified Certificates of Origin (CO). This advisory aims to alert relevant parties to the risks associated with such practices and to enhance compliance efforts within the oil trade sector.

Practice Compliance weekly highlights—21 November 2024

This week's edition of Practice Compliance weekly highlights includes: the latest financial sanctions updates, three new consultations from the Solicitors Regulation Authority (SRA) on client money management and consumer protection, initiation of a consultation for legal regulators to combat economic crime by the Legal Services Board (LSB), and new guidance from the SRA on internal investigations, together with a suite of guidance for in-house solicitors.

View Practice Compliance by content type :

News