Schedule 9, Part 2, paragraph 27(1)

For the purposes of Article 44A(1)(a) and (2)(b) of the UK GDPR (general principles for transfers of personal data), a transfer of personal data to a third country or an international organisation made on or after the relevant day is made subject to appropriate safeguards where— the transfer is made under arrangements entered into before the relevant day, safeguards are provided in accordance with paragraph 2 or 3 of Article 46 of the UK GDPR or paragraph 9 of Schedule 21 to the 2018 Act, and if the transfer had been made immediately before the relevant day, it would have satisfied— the condition in Article 46(1) of the UK GDPR relating to data subjects’ rights and legal remedies, and the requirements of the last sentence of Article 44 of the UK GDPR (level of protection must not be undermined).

← 27 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04