Insights Information Commissioner’s Office consults on how organisations can continue to protect people’s personal data when it is transferred outside of the UK


The ICO is seeking responses on its draft international data transfer agreement (IDTA) and guidance, which replace Standard Contractual Clauses (SCCs).

The consultation is split into three sections, offering a selection of proposals and options to consider:

  1. proposal and plans for updates to guidance on international transfers;
  2. transfer risk assessments; and
  3. the IDTA.

The ICO is also asking for views on any relevant privacy rights, legal, economic or policy considerations and implications. The ICO says that it is keen to hear from all interested parties including:

  • data protection practitioners needing to consider the international transfer of personal data;
  • legal professionals advising on the international transfer of personal data;
  • small, medium and micro businesses requiring an accessible way to understand the law;
  • multinational organisations that need UK laws to help them conduct international business involving the transfer of personal data as well as being interoperable with other data protection regimes; and
  • civil society.

The ICO is also running online workshops in September which are open to anyone involved in the international transfer of data.

The consultation closes on 7 October 2021. To access the consultation and for details on how to register for the online workshops, click here.