Courses take place in:

London, Manchester, Belfast, Glasgow, Edinburgh & Brussels

EU data protection law restricts the transfer of personal information to countries outside the European Economic Area that do not have an ‘adequate level of data protection’. This restriction is entirely at odds with the way in which organisations operate in today’s world, and presents a challenge for international commerce, global data processing and international outsourcing.

This session provides a practical hands-on approach to the different mechanisms available to overcome the legal limitations affecting international data transfers. Attend this session to identify the most appropriate solution to the challenges faced by your organisation and learn about the most cost-effective way to comply with the law.

This session, which is fully up to date with the requirements of the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and the implications of Brexit, addresses all of the practical questions affecting international transfers of personal data such as:

• what amounts to a transfer of personal data?
• what are the methods of ensuring that transfers are lawful?
• which is the best method to use for the foreign outsourcing of functions such as website hosting, IT maintenance and call centres?
• how will I ensure that my organisation is lawfully using ‘cloud’ providers?
• in what circumstances can my organisation make its own determination of ‘adequacy’?
• how do Binding Corporate Rules work and how would I go about obtaining approval?
• what is the “Privacy Shield”, and how can I use it to legalise transfers of data from the EU to the United States?
• how and when can we use consent to justify international transfers?
• what is the right approach to adopt in my organisation’s particular case?

Delegates will acquire the knowledge necessary to determine the most effective method for ensuring the legality of international transfers in any given circumstance.

Attendance on this course can be used as credit towards gaining the Practitioner Certificate in Data Protection.