A practical approach: ICO guidance on Transfer Risk Assessments

The ICO allows organisations to act according to their risk appetite, but those who are also EU-regulated will not benefit fully. Gareth Oldale and Tillie Clark of TLT LLP report.

The recently published ICO guidance on international data transfers has provided organisations with increased clarity on how to best protect people’s data whilst adopting a reasonable and proportionate approach.

On 17 November 2022, the ICO expanded its guidance on international transfers to include a section on transfer risk assessments (TRAs) and a new TRA tool (TRA Tool). The ICO’s approach strikes a balance between “protecting people’s personal information” and “empowering innovation and growth”, and is in this respect a welcome development to the approach previously taken by the European Data Protection Board (EDPB).

Continue Reading

UK Report subscribers, please login to access the full article


If you wish to subscribe, please see our subscription information.