Section 78(1)

... The transferring controller must make it a condition of the transfer — that the personal data is not to be further transferred to a third country or international organisation without the authorisation of the transferring controller or another competent authority (the “UK authoriser”), or that— the personal data is not to be so transferred without such authorisation except where subsection (1A) applies, and where a transfer is made without such authorisation, the UK authoriser must be informed without delay.

← A1 · All articles · 1A →

Source: legislation.gov.uk · retrieved 2026-09-04