UK GDPR—2022 standard contractual clauses (SCCs) for the transfer of personal data outside the UK—International Data Transfer Agreement (IDTA)

Published by a ��˾��ҹ�� Information Law expert

Precedents

UK GDPR—2022 standard contractual clauses (SCCs) for the transfer of personal data outside the UK—International Data Transfer Agreement (IDTA)

Published by a ��˾��ҹ�� Information Law expert

Precedents

In brief

Chapter V (Transfers of personal data to third countries or international organisations) of the United Kingdom General data protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) restricts transfers of personal data outside the UK (and to certain ‘international organisations’). Assimilated law is the name given to retained EU law (‘REUL’) which remains in force after the end of 2023. The re-categorisation of REUL (and associated terms) to assimilated law reflects a change in its status and treatment under UK law, in that it is generally to be interpreted according to ordinary domestic law and principles.

From 1 January 2024, REUL is ‘assimilated’ into domestic law by virtue of the fact it is generally stripped of EU-derived interpretive effects (eg supremacy of EU law, directly effective rights, and general principles previously retained under EU(W)A 2018). For more information, see Practice Note: Assimilated law and News Analysis: Implications of the move to ‘assimilated’ law, and the Retained EU Law (Revocation and Reform)

Jurisdiction(s):

United Kingdom

Key definition:

Personal data definition

What does Personal data mean?

Personal data means data relating to a living individual who can be identified from such data, either alone or with other information in the data controller’s possession. It includes opinions about, and intentions in relation to the data subject.

��˾��ҹ��