| Link(s): | International transfers | ICO |
Context
Earlier this year the ICO published the International Data Transfer Agreement (IDTA) and the Addendum to the European Union Standard Contractual Clauses (SCCs); recent social media content has reminded firms that it has updated its guidance on international transfers.
Key points to note
The update includes a new section on transfer risk assessments (TRAs) and a TRA tool. The guidance poses an alternative approach to the one put forward by the European Data Protection Board. The ICO aim to find an alternative and achievable approach to deliver the right protection for the people the data relates to whilst ensuring a reasonable and appropriate assessment. The ICO has created a six question TRA tool with guidance to help people work through it. The tool aims to shift the focus to whether the transfer significantly increase the risk of a privacy or other human rights breach.
Next actions
None – for information and awareness.