After being presented to the UK Parliament in February 2022, the UK's new data transfer tools are now in force and ready for use.
What new tools are available?
The UK has approved two new transfer tools:
- A UK International Data Transfer Agreement (IDTA).
- A UK addendum to the 2021 European Commission-approved standard contractual clauses, which can be used to supplement European Union-focused standard contractual clauses where UK data transfers occur alongside EU data transfers.
Timeline
Below are the key dates to factor into your plans when rolling out and using the new UK transfer tools.
- 21 March 2022: The new UK transfer tools entered into force and can now be used as a transfer mechanism under the UK General Data Protection Regulation (GDPR).
- 21 September 2022: After this date, all new contracts governing UK data transfers need to use one of the new UK transfer tools.
- 21 March 2024:
- After this date, all contracts governing UK data transfers need to use one of the new UK transfer tools.
- Until this date, assuming the subject matter of the contracts remains unchanged, existing contracts can continue to rely on the old EU standard contractual clauses (i.e., those issued under the EU Data Protection Directive, but preserved in UK law post-Brexit on a transitional basis).
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.