On 2nd February, the ICO’s new updated standard contractual clauses for international data transfers (now called IDTA – International Data Transfer Agreement) were laid before Parliament. If no objections are raised in Parliament, they come into force on 21st March 2022 and apply to all businesses transferring personal data from the UK to other countries which are not viewed as having adequate safeguards in place.
This does not require any change for businesses transferring personal data within the UK or to EEA countries or territories which the ICO categorise as adequate. However transfers to USA or Australian businesses are impacted. The new agreement, guidance and transitional guidance are available here.
If you have any questions on any of the issues mentioned in the above article, please contact Sean Morris.