UK-US data transfer and agreements: What businesses need to know

In Short

• The UK GDPR allows data transfers to the US only if specific safeguards are in place.
• The UK-US Data Bridge simplifies transfers to certified US companies but isn't always available.
• If your US supplier is not certified, other options like SCCs or anonymisation may apply, but require careful handling.

Tips for Businesses

Check whether your US partners are certified under the UK-US Data Bridge. If not, consider alternatives like SCCs with a Transfer Risk Assessment or anonymisation. Don't rely on exceptions unless absolutely necessary. Given the complexity and legal risk, speak to a data protection lawyer before transferring any personal data to the US.