CHAPTER 7: TRANSFERRING DATA OVERSEAS

Principle 8 is another important provision. It limits the transfer of personal data to countries outside the EEA unless the data controller can bring themself within one of the exceptions to this prohibition, or they can be sure that equivalent protection is provided for the personal data in the country to which it is being sent.

Simply putting information on a website hosted within the EEA does not amount to a transfer of personal data, but if information is deliberately pushed onto a website outside the EEA or is transferred, whether electronically or by disc or other mechanism outside the EEA, or access is given from outside the EEA, then these provisions apply.

The restrictions on sending personal data ...

Get Data Protection Compliance in the UK, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.