Legal Services


Transfer of personal data overseas

It is important to understand that all transfers of personal data to a country outside the EEA require what is known as an “adequacy” assessment. This means that we need to be sure that the country the personal data is to be transferred to offers the same level of protection for personal data that we have in the UK, and which as a result of the EU directive, is also available throughout the EEA. The protections needed relate to data security, transparency of use and an individual’s rights. The term ‘transfer’ covers any form of access to personal data from overseas not just a permanent physical movement of the data.

Sending personal data to a country outside of the EEA
The new EU-US Privacy Shield
The reason for the change 
What does Privacy shield do?
The implications of the changes for UCL
Further information

Updated: July 2016