International Data Transfers - Act Now

The ability of organisations to transfer personal data overseas lawfully is critical to a country's social and economic success. From ecommerce and banking to health care and social media, all sectors rely on the free flow of personal data.

To ensure such transfers are GDPR compliant, the fundamental rights and freedoms of data subjects must be safeguarded through the use of an appropriate transfer mechanism. There is still much confusion about this topic, especially following the judgement of the European Court of Justice in “Schrems II” and the issuing of new standard contractual clauses by the UK and the EU.

This practical workshop will guide you through the transfer mechanisms set out in part V of GDPR and enable you to decide the best option for your transfers. You will learn how to complete the different transfer documents, including the UK International Data Transfer Agreement, and how to undertake a Transfer Impact Assessment. We will also examine the recently announced agreement between the US and EU which will replace the Privacy Shield.

By the end of this workshop you will be able to: recognise a restricted transfer under the UK GDPR, implement the requirements of the various Art 46 transfer mechanisms, select the most appropriate transfer mechanism for your organisation, conduct a Transfer Impact Assessment and execute the different model standard contractual clauses issued by the UK and the EU.