Schedule 8, paragraph 3(5)

In subsection (4)— after paragraph (a) (but before the “or” at the end of that paragraph) insert— the intended recipient is a person in a third country who— is not a person described in paragraph (a), but is a processor whose processing, on behalf of the controller, of the personal data transferred is governed by, or authorised in accordance with, a contract with the controller that complies with section 59, in paragraph (b)(i), for “other than a relevant authority” substitute “who is not a person described in paragraph (a) or (aa)”.

← 4 · All articles · 6 →

Source: legislation.gov.uk · retrieved 2026-09-04