Restricted transfer check

Conditions Data protection

Work through a transfer of personal data out of the UK: is it restricted, which route applies, and is the data protection test met and recorded?

0 of 5

Is it a restricted transfer? Personal data subject to the UK GDPR is going to a receiver outside the UK that is a separate controller or processor UK GDPR Chapter V

Route Route identified: UK adequacy regulations for the destination, or an Art 46 safeguard (IDTA, UK Addendum, UK BCRs), or exceptionally an Art 49 derogation UK GDPR Arts 45 to 49 Where relying on a safeguard: data protection test assessed, protection after transfer not materially lower than in the UK UK GDPR Chapter V as amended (DUAA 2025 s.85, in force 2026-02-05) Onward transfers by the receiver covered by the contract or rules UK GDPR Art 44 Assessment and route documented and linked from the record of processing UK GDPR Art 5(2); Art 30(1)(e)

Result: Tick the items that apply.

Where this applies

Sources

Primary UK GDPR (Regulation (EU) 2016/679 as it applies in the UK) legislation.gov.uk
Primary Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 (SI 2026/82) legislation.gov.uk