Data Protection


Data Protection Updates

The EU - U.S. Privacy Shield is no longer valid

The European Court of Justice has invalidated the EU - U.S. Privacy Shield: Schrems II case, that allowed the transfer of personal data between the two regions, stating that personal data protection and its judicial protection in the U.S. is not in keeping with requirements of EU law.

This will affect any future contracts determining whether data can be transferred to a U.S. based company. UCL has produced a short guidance note based on the initial impact of this decision.  If you have any queries surrounding this issue after reading our guidelines, please contact the data protection office before doing so on: data-protection@ucl.ac.uk.

September 2020