Insights, Guides & Data Protection Resources

International data transfers under UK GDPR can happen whenever personal data is stored, accessed or processed outside the UK — including through cloud software, overseas support teams or group companies. This guide explains the key rules in plain English, covering adequacy decisions, IDTAs, the UK Addendum to EU SCCs, the UK-US Data Bridge and the practical checks organisations should complete before transferring personal data abroad.

Most data teams understand, in broad terms, that the General Data Protection Regulation, known as GDPR, applies to the personal data they work with. They may know that personal data...

Here is a scenario most engineers recognise. A product launches, users start signing up, and then someone from legal or compliance asks: "How are we handling personal data?" Cue a...