International transfers of your personal data

We may provide personal data to third parties outside the European Economic Area (EEA). The EEA includes all European Union countries and the non-EU countries Iceland, Liechtenstein and Norway.

The European Commission has made an "adequacy decision" in respect of a number of other countries outside of the EEA (called ‘third countries’). An adequacy decision is a decision which confirms whether or not a third country provides an adequate level of protection of an individual’s personal data. Where this is done, it will be through an agreed contract with UK service provider

The Government has announced that the Treaty agreed with the EU will allow personal data to flow freely from the EEA to the UK for no more than six months from 31 December 2020, or until adequacy decisions have been adopted (if earlier).

Page last updated: 1 May 2024