Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 JULY 2021

International Data Transfers: An Update For Education Businesses

Freeths LLP
Freeths LLP
Contributor
Freeths LLP

Freeths LLP

Freeths is one of the UK’s leading, full-service, commercial law firms, with 1,000+ freethinking,...

View firm profile
Explore more from Freeths LLP

With the ever-increasing adoption of software as a service and cloud-based storage of data, more and more situations are arising in which personal data is transferred across international borders.

European UnionPrivacy
Frank Suttie
Frank Suttie
Luke Dixon
Luke Dixon

June is already proving to be an important month in the continuing development of data protection laws as applied to the transfer of personal data from territories that, in GDPR terms, have "adequate" data protection laws and the steps that the data controller needs to take, where the personal data it controls may pass into territories that do not meet an adequacy test.

Why is this briefing important to me?

With the ever-increasing adoption of software as a service and cloud-based storage of data, more and more situations are arising in which personal data is transferred across international borders. The EU is modernising its GDPR based approach to international transfers, which includes requiring some very specific actions from data processors involved in the chain of processing activity that arises in such circumstances. The detail is contained in two decisions of the European Commission published on June 4th.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Ten AI Giants, One Regulator And A Lesson For Everyone Else: What The ICO’s Foundation Model Report Really Tells Us

The UK's Information Commissioner's Office has completed its supervision of major AI foundation model developers, revealing significant gaps in data protection practices and setting new expectations for legitimate interests assessments, transparency, and special category data handling. The regulator has now turned its attention to agentic AI systems, warning that autonomy is not an excuse for poor compliance and launching a call for evidence that will shape future regulatory guidance.
United KingdomPrivacy
Burges Salmon LLP
Burges Salmon LLP
Article

ICO Cookie Crackdown 2.0: The ICO’s New Storage And Access Technologies Guidance

The UK Information Commissioner's Office has finalized its guidance on storage and access technologies, expanding compliance requirements beyond traditional cookies to include tracking pixels, device fingerprinting, and web storage. Organizations must now navigate stricter consent standards and three new narrow exceptions introduced by the Data (Use and Access) Act 2025, while facing significantly increased enforcement penalties of up to £17.5 million or 4% of annual worldwide turnover.
United KingdomPrivacy
ZwillGen
ZwillGen
Article

European Commission Press Release: EU AI Act Transparency Enforcement Starts This Sunday! Do You Know Who Your Chatbots Are? We Break Down The Commission’s Guidelines On Transparency Below

The European Commission has announced that EU AI Act transparency rules take effect August 2, 2026, requiring chatbots to identify themselves, deepfakes to be labeled, and AI-generated content to be marked. Organizations must assess whether their AI systems trigger disclosure, labeling, or content-marking requirements, with limited exceptions and penalties reaching €15 million or 3% of global turnover for noncompliance.
GlobalPrivacy
Seyfarth Shaw LLP
Seyfarth Shaw LLP
Article

ICO Launches Consultation On Draft Guidance Regarding Anonymisation And Pseudonymisation For Research Purposes

The UK's Information Commissioner's Office has opened a public consultation on draft guidance addressing anonymisation and pseudonymisation techniques for processing personal data in research, archiving, and statistical contexts. The guidance explores critical distinctions between anonymous and pseudonymous data, outlines required safeguards under UK GDPR, and examines emerging technologies including synthetic data and privacy-enhancing tools.
United KingdomPrivacy
A&O Shearman
A&O Shearman
Article

EU AI Act Transparency Rules Now Apply: What Businesses Need To Know

From 2 August 2026, the EU AI Act introduces mandatory transparency obligations requiring organisations to disclose AI interactions, mark AI-generated content, and inform users about emotion recognition and biometric categorisation systems. These rules apply not only to EU organisations but also to international businesses whose AI systems or outputs reach the EU market, with limited transitional periods for compliance.
European UnionTechnology
Freeths LLP
Freeths LLP
Article

Beyond Special Category Data: ICO Signals New Era Of Neurodata Regulation

The UK Information Commissioner's Office has published findings from a citizens' jury examining public attitudes toward neurotechnology and neurodata collection. Twenty UK residents deliberated on how to balance the benefits of brain-monitoring devices against privacy risks, revealing strong support for medical applications but significant opposition to workplace productivity monitoring and concerns about discrimination against neurodiverse individuals.
United KingdomPrivacy
Freeths LLP
Freeths LLP
Article

ICO Executes Search Warrants To Combat Nuisance Marketing Linked To Car Finance Mis-selling Claims

The Information Commissioner's Office has executed search warrants across the UK targeting businesses suspected of sending 170 million unlawful marketing text messages related to car finance mis-selling claims. This enforcement action, part of a joint regulatory task force investigation, signals heightened scrutiny of direct marketing practices and raises critical compliance questions for businesses relying on electronic communications to generate leads.
United KingdomMedia, Telecoms, IT, Entertainment
Freeths LLP
Freeths LLP
Article

Environmental Law Update | August 2026

This comprehensive environmental law update examines significant regulatory changes across biodiversity net gain, waste tracking, carbon border adjustments, PFAS chemicals, water company enforcement, and infrastructure planning reforms. The analysis explores how new regulations will reshape environmental compliance obligations for businesses, landowners, and developers while examining the balance between regulatory protection and operational flexibility.
United KingdomEnvironment
Freeths LLP
Freeths LLP
Article

New Right To Work Rules Put Hospitality Staffing Models Under The Spotlight

The UK government is expanding right to work checks beyond traditional employees to include casual workers, contractors, and gig economy workers under the Border Security, Asylum and Immigration Act 2025. This represents the most significant expansion of immigration compliance rules in decades, requiring employers to verify immigration status across a much broader range of working relationships including agency-supplied labour, self-employed contractors, and platform workers.
United KingdomImmigration
Freeths LLP
Freeths LLP
Article

From Consultation To Publication: What Has Changed In The New NPPF?

The UK Government has published a revised National Planning Policy Framework (NPPF) that introduces significant changes to planning policy, including new provisions for development around well-connected railway stations, expanded Green Belt exceptions, and stricter density requirements. While retaining much of the consultation version's structure, key modifications have been made to transitional arrangements, plan-making timelines...
United KingdomReal Estate and Construction
Freeths LLP
Freeths LLP