ICO Revises Guidance on International Data Transfers
Information Commissioner’s Office (ICO) has updated international transfers guidance, adding a new section on transfer risk assessments and a downloadable TRA tool. The updates aim to help organisations understand how they can protect personal information when making international transfers at point of transfer.
Earlier this year, ICO published International Data Transfer Agreement (IDTA) and Addendum to the European Union Standard Contractual Clauses (SCCs). Latest updates are intended to provide an alternative transfer risk assessment approach to the one put forward by the European Data Protection Board.
The guidance, plus 6-question TRA tool, offers a framework to identify initial risk level for categories of data and focuses on whether a potential transfer significantly increases risk of privacy or human rights breach(es). ICO believes the new approach is both achievable and able to successfully capture key risk to people the data is about.
Let’s Talk
For advice including access to our network of experts, get in touch with LHP today on Let’s Talk. See also International transfers | ICO.
