Dedication |
|
v | |
Abbreviations |
|
vii | |
|
|
xv | |
|
Table of Statutory Instruments |
|
|
xvii | |
|
Table of European Legislation |
|
|
xix | |
|
|
|
|
3 | (6) |
|
|
3 | (6) |
|
|
|
Chapter 2 EU-UK Data Transfer Steam |
|
|
9 | (6) |
|
|
9 | (1) |
|
EU-UK data transfer stream |
|
|
10 | (1) |
|
Adequacy for EU-UK data stream |
|
|
11 | (1) |
|
|
12 | (3) |
|
Chapter 3 UK-International Data Transfer Stream |
|
|
15 | (2) |
|
|
15 | (2) |
|
Chapter 4 UK-EU Data Transfer Steam |
|
|
17 | (2) |
|
|
17 | (2) |
|
Chapter 5 UK-EU Data Transfer Stream |
|
|
19 | (2) |
|
|
19 | (2) |
|
Chapter 6 UK-International Data Transfer Steam |
|
|
21 | (2) |
|
|
21 | (2) |
|
Chapter 7 US-UK Data Transfer Stream |
|
|
23 | (2) |
|
|
23 | (2) |
|
Chapter 8 UK-US Data Transfer Stream |
|
|
25 | (2) |
|
|
25 | (2) |
|
Chapter 9 International-UK Data Transfer Stream |
|
|
27 | (2) |
|
|
27 | (2) |
|
Chapter 10 International-UK-International Data Transfer Stream |
|
|
29 | (4) |
|
|
29 | (4) |
|
|
|
Chapter 11 Data Transfer Laws |
|
|
33 | (6) |
|
|
33 | (1) |
|
Default data transfer bans |
|
|
33 | (2) |
|
|
35 | (1) |
|
|
35 | (2) |
|
|
37 | (2) |
|
|
39 | (18) |
|
|
39 | (1) |
|
Transfers banned as default |
|
|
39 | (1) |
|
|
40 | (2) |
|
|
42 | (11) |
|
Adequate country protection channel |
|
|
42 | (3) |
|
|
45 | (1) |
|
|
45 | (1) |
|
|
45 | (1) |
|
Appropriate safeguards channel |
|
|
46 | (1) |
|
Binding corporate rules channel |
|
|
47 | (3) |
|
Transfers not authorised by EU law |
|
|
50 | (1) |
|
Country and international organisation derogations |
|
|
50 | (2) |
|
International cooperation |
|
|
52 | (1) |
|
|
52 | (1) |
|
New EU Standard Contract Clauses |
|
|
53 | (2) |
|
Controller to processor contracts |
|
|
55 | (1) |
|
Contracts and transfers to third countries |
|
|
55 | (1) |
|
|
56 | (1) |
|
|
56 | (1) |
|
|
57 | (24) |
|
|
57 | (1) |
|
|
57 | (1) |
|
|
57 | (1) |
|
Brexit and data protection |
|
|
57 | (2) |
|
|
58 | (1) |
|
Post-Brexit data protection law |
|
|
58 | (1) |
|
|
59 | (1) |
|
|
59 | (9) |
|
Adequacy channel for EU-UK data stream |
|
|
68 | (3) |
|
|
71 | (6) |
|
Future international cooperation |
|
|
77 | (1) |
|
|
77 | (4) |
|
Chapter 14 International Laws |
|
|
81 | (8) |
|
|
81 | (1) |
|
|
81 | (1) |
|
|
81 | (1) |
|
|
82 | (1) |
|
|
82 | (1) |
|
|
82 | (1) |
|
International relations and cooperation |
|
|
82 | (2) |
|
|
84 | (1) |
|
|
85 | (4) |
|
|
|
Chapter 15 Practice and transfers |
|
|
89 | (6) |
|
|
89 | (1) |
|
|
89 | (2) |
|
|
91 | (2) |
|
|
93 | (2) |
|
Chapter 16 Legal and business certainty |
|
|
95 | (24) |
|
|
95 | (1) |
|
|
95 | (2) |
|
Pressure for official advice and clarity |
|
|
97 | (14) |
|
One solution to one data problem |
|
|
111 | (4) |
|
Changes from EU positions |
|
|
115 | (3) |
|
|
118 | (1) |
|
Chapter 17 Caselaw on Transfers and Transfer Rules |
|
|
119 | (10) |
|
|
119 | (1) |
|
|
119 | (2) |
|
|
121 | (5) |
|
|
126 | (1) |
|
|
127 | (1) |
|
|
127 | (2) |
|
Chapter 18 Standards and Vendors |
|
|
129 | (6) |
|
|
129 | (1) |
|
|
129 | (1) |
|
|
130 | (1) |
|
|
130 | (1) |
|
|
130 | (5) |
|
|
|
|
135 | (8) |
|
|
135 | (1) |
|
|
135 | (1) |
|
Adequate protection channel |
|
|
136 | (2) |
|
|
138 | (2) |
|
|
140 | (3) |
|
Chapter 20 UK Adequacy Decision, Consultation, and Change |
|
|
143 | (32) |
|
|
143 | (1) |
|
|
143 | (1) |
|
|
144 | (1) |
|
|
145 | (2) |
|
|
147 | (1) |
|
Consultation: Data intermediaries |
|
|
147 | (1) |
|
Consultation: Further questions |
|
|
148 | (1) |
|
Consultation: Adequacy and boosting data transfers |
|
|
149 | (2) |
|
Consultation: Alternative and alternative transfer mechanisms |
|
|
151 | (2) |
|
Consultation: Proportionality of appropriate safeguards |
|
|
153 | (1) |
|
Consultation: Reverse transfers exemption |
|
|
153 | (1) |
|
Consultation: Adaptable transfer mechanisms |
|
|
154 | (1) |
|
Consultation: New alternative transfer mechanisms power |
|
|
155 | (1) |
|
Consultation: Certification schemes |
|
|
155 | (2) |
|
Consultation: Derogations |
|
|
157 | (1) |
|
Government response to consultation |
|
|
157 | (9) |
|
|
166 | (9) |
|
Chapter 21 Approved Contracts |
|
|
175 | (4) |
|
|
175 | (1) |
|
Creating adequacy through contract |
|
|
175 | (1) |
|
New EU standard contract clauses |
|
|
175 | (2) |
|
Need for UK model contracts |
|
|
177 | (2) |
|
Chapter 22 Controller to Processor Contracts |
|
|
179 | (6) |
|
|
179 | (1) |
|
New EU standard contract clauses |
|
|
179 | (2) |
|
Controller to processor contracts |
|
|
181 | (1) |
|
UK controller to processor contracts |
|
|
182 | (3) |
|
Chapter 23 Controller to Controller Contracts |
|
|
185 | (10) |
|
|
185 | (1) |
|
New EU standard contract clauses |
|
|
186 | (1) |
|
Contracts and transfers to international third countries |
|
|
187 | (1) |
|
UK contracts and transfers to international third countries |
|
|
188 | (2) |
|
UK controller-to-controller contracts |
|
|
190 | (5) |
|
Chapter 24 Binding Corporate Rules |
|
|
195 | (6) |
|
|
195 | (1) |
|
BCR data transfer permission channel |
|
|
195 | (2) |
|
|
197 | (2) |
|
|
199 | (2) |
|
Chapter 25 Individual Data Regulator Approvals and Safeguards |
|
|
201 | (120) |
|
|
201 | (1) |
|
ICO transfer permission channels |
|
|
201 | (1) |
|
International cooperation |
|
|
202 | (1) |
|
|
203 | (1) |
|
|
203 | (4) |
|
|
|
Schedule 1 GDPR on Data Transfers |
|
|
207 | (8) |
|
Schedule 2 UK GDPR on Data Transfers |
|
|
215 | (12) |
|
Schedule 3 Data Protection Act 2018 on Data Transfers |
|
|
227 | (2) |
|
Schedule 4 Government Response to Consultation on Data Transfers |
|
|
229 | (8) |
|
Schedule 5 Data Protection and Digital Information Bill on Data Transfers |
|
|
237 | (10) |
|
Schedule 6 EU Adequacy Decision re EU -- UK Data Transfers |
|
|
247 | (2) |
|
Schedule 7 EU Decision on Standard Contractual Clauses -- Controllers and Processors |
|
|
249 | (14) |
|
Schedule 8 EU Decision on Standard Contractual Clauses to Third Countries |
|
|
263 | (34) |
|
Schedule 9 EU-US Transfers |
|
|
297 | (2) |
|
|
299 | (22) |
Index |
|
321 | |