The recently published ICO guidance on international data transfers has provided organisations with increased clarity on how to best protect people’s data whilst adopting a reasonable and proportionate approach.

On 17 November 2022, the ICO expanded its guidance on international transfers to include a section on transfer risk assessments (TRAs) and a new TRA tool (TRA Tool). The ICO’s approach strikes a balance between “protecting people’s personal information” and “empowering innovation and growth”, and is in this respect a welcome development to the approach previously taken by the European Data Protection Board (EDPB).