Transfer of Personal Data - outwith the University

The University is treated as a single corporate organisation from the Data Protection viewpoint. However, personal data may only be transferred outwithin the University but still within the European Economic Area under the following conditions:

• the transfer is consistent with the University's notification with the OIC; and
• the transfer is within the European Economic Area; and
• the recipient has, in writing, accepted the data protection requirements that must be observed and subject to audit by the University; or
  the transfer is required to comply with legislation.
• It is advisable, if you are unsure as to whether any of the above conditions apply, to consult with the University's Data Protection Officer where the transfer of personal data outwith the University is being considered.

The 8th Principle of the DPA forbids the transfer of personal, and sensitive personal, data outwith the European Economic Area unless specific conditions are met. See seperate entry in this A to Z Guide. The European Economic Area is currently defined as the European Union [EU], plus Iceland, Norway and Liechtenstein.