Transfer of data
Can personal data be transferred to a country or territory outside the EEA?
There is a general prohibition on transfers of personal data outside of the EEA unless these transfers are subject to quite narrowly prescribed conditions and safeguards.
The University clearly works with many organisations in countries and territories which fall outside of this region, but this does not mean that the University cannot supply, or provide access to, personal data to organisations in those countries. It does, however, mean that researchers need to comply with the conditions for transferring personal data to such countries and territories.
Please note that if you move to another institution which is located outside the EEA, and the University has permitted you to take research data with you, this will count as a transfer of data.
Transfers of personal data to a country or territory outside the EEA may take place if one of the following conditions are complied with:
Researchers should seek advice from Research Services on all research-related agreements, including when seeking to legitimise transfers of personal data outside the EEA under standard contractual clauses, Privacy Shield or otherwise.