Schedule 9, Part 2, paragraph 27

For the purposes of Article 44A(1)(a) and (2)(b) of the UK GDPR (general principles for transfers of personal data), a transfer of personal data to a third country or an international organisation made on or after the relevant day is made subject to appropriate safeguards where— the transfer is made under arrangements entered into before the relevant day, safeguards are provided in accordance with paragraph 2 or 3 of Article 46 of the UK GDPR or paragraph 9 of Schedule 21 to the 2018 Act, and if the transfer had been made immediately before the relevant day, it would have satisfied— the condition in Article 46(1) of the UK GDPR relating to data subjects’ rights and legal remedies, and the requirements of the last sentence of Article 44 of the UK GDPR (level of protection must not be undermined). Sub-paragraph (1) has effect in addition to Article 46(1A) of the UK GDPR. In this paragraph— “international organisation” has the same meaning as in the 2018 Act (see section 205 of that Act); “personal data” has the same meaning as in the 2018 Act (see section 3 of that Act); “the relevant day” means the day on which paragraph 6 of Schedule 7 to this Act comes into force; “third country” has the same meaning as in Part 3 of the 2018 Act (see section 33 of that Act).

← 2 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04