{"id":181897,"date":"2023-07-03T02:00:57","date_gmt":"2023-07-03T01:00:57","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=181897"},"modified":"2024-10-03T05:58:59","modified_gmt":"2024-10-03T04:58:59","slug":"transferring-data-overseas","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/","title":{"rendered":"Lessons from Uber and Facebook in Transferring Personal Data Overseas"},"content":{"rendered":"\n<p>If your business sends personal data overseas, you must ensure that you are complying with data protection laws. Recent cases found that Uber and Facebook owner, Meta, have <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/data-protection-enforcement\/\">breached data protection<\/a> laws by unlawfully sending user data overseas from the EU to the US. In this article, we unpack the data protection laws concerning sending personal data overseas, how Uber and Facebook have breached data protection laws and how you can avoid the same mistakes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Transferring Personal Data Outside of the United Kingdom<\/h2>\n\n\n\n<p>All UK businesses that process personal data must <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/privacy-obligations\/\">comply with data protection laws<\/a>. Examples of situations where you may transfer personal data outside of the UK include where:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>you input personal data into software, such as your CRM, that is operated out of another country;<\/li>\n\n\n\n<li>your IT support or customer service centre operates out of another country; and<\/li>\n\n\n\n<li>you have a related entity based in another country.<\/li>\n<\/ul>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p><span style=\"font-weight: 400\">Generally, transferring personal data outside the UK is prohibited unless you can rely on an exemption. This is because some countries do not have adequate data protection laws in place, and it is essential to ensure that all personal data you process is well looked after and protected.<\/span><\/p>\n<\/div>\n\n\n\n<p>The key exceptions you may rely on are:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>where you are transferring personal data to an approved jurisdiction;<\/li>\n\n\n\n<li>where appropriate safeguards have been put in place to protect the transfer (most commonly through approved contractual clauses); or<\/li>\n\n\n\n<li>where you have consent.<\/li>\n<\/ul>\n\n\n\n<p>Let us explore these exceptions in further detail.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Transferring Personal Data to an Approved Jurisdiction<\/h3>\n\n\n\n<p>You may transfer data to an approved jurisdiction, provided you comply with the standard rules of transferring personal data. The UK has currently approved the following countries as locations that provide an adequate level of data protection:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Andorra;<\/li>\n\n\n\n<li>Argentina;<\/li>\n\n\n\n<li>Canada (commercial organisations);<\/li>\n\n\n\n<li>the EU member states and European Economic Area Members;<\/li>\n\n\n\n<li>Faroe Islands;<\/li>\n\n\n\n<li>Guernsey;<\/li>\n\n\n\n<li>Israel;<\/li>\n\n\n\n<li>Isle of Man;<\/li>\n\n\n\n<li>Japan;<\/li>\n\n\n\n<li>Jersey;<\/li>\n\n\n\n<li>New Zealand;<\/li>\n\n\n\n<li>Gibraltar;<\/li>\n\n\n\n<li>Switzerland; and&nbsp;<\/li>\n\n\n\n<li>Uruguay.<\/li>\n<\/ul>\n\n\n\n<p>You may also be able to transfer personal data to some organisations in the US that meet certain certification requirements under the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/us-data-bridge\/\">UK-US Data Bridge<\/a>. Under this framework, certified US companies must follow specific privacy principles. If you transfer personal data to such companies, UK individuals can access a redress mechanism if they believe their data has been misused.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Appropriate Safeguards&nbsp;<\/h3>\n\n\n\n<p>If the location you are sending personal data to is not an approved country, you can implement safeguards to protect the transfer and receipt of personal data. The most common way to do this is to implement contractual provisions approved by the <a href=\"https:\/\/www.gov.uk\/government\/organisations\/information-commissioner-s-office\">UK\u2019s Information Commissioner\u2019s Office<\/a> (ICO) to <a href=\"https:\/\/ico.org.uk\/for-organisations\/uk-gdpr-guidance-and-resources\/international-transfers\/international-data-transfer-agreement-and-guidance\/\">protect the transfer<\/a>.&nbsp;<\/p>\n\n\n\n<div  class=\"box box--icon box--warning\">\n    <p>Before relying on an appropriate safeguard to make a restricted transfer, make sure the people whose data is being transferred have an essentially equal level of protection as they would in the UK.<\/p>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Consent<\/h3>\n\n\n\n<p>You can obtain explicit consent from individuals to transfer their personal data outside of the UK after informing them of the possible risks of such transfers. A general consent to transfer data to third parties or general notification of the third parties you disclose to in your privacy policy is not sufficient consent. The consent has to be very specific and voluntary. However, this is usually impractical for most situations.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Uber and Facebook\u2019s Breach of Data Protection Laws<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">What Uber Did Wrong<\/h3>\n\n\n\n<p>The Dutch Data Protection Authority (DPA) recently fined Uber, the world\u2019s largest rideshare company, \u20ac290 million for transferring European Uber drivers&#8217; personal data to the US without adequate safeguards. This violated the European data protection laws, which are very similar to UK data protection laws.&nbsp;<\/p>\n\n\n\n<p>The personal data shared by Uber included sensitive information such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>account details;<\/li>\n\n\n\n<li>taxi licences;<\/li>\n\n\n\n<li>location data; and<\/li>\n\n\n\n<li>criminal and medical records.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>For over two years, Uber transferred this data without proper transfer tools, compromising the privacy rights of many individuals. Much like in the UK, the fine was calculated based on Uber&#8217;s worldwide annual turnover, with a maximum limit of 4%. Although the fine was issued in the EU, the UK\u2019s data protection regime is very similar to that of the EU, and this case serves as a stark reminder that regulatory authorities are actively overseeing transfer practices to ensure compliance.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What Facebook Did Wrong<\/h3>\n\n\n\n<p>Facebook owner Meta is one of the world\u2019s most valuable companies and processes the personal data of millions of users. In May 2023, Meta was <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/gdpr-fines-learn\/\">fined<\/a> \u00a31 billion by Ireland\u2019s Data Protection Commission and ordered to suspend the transfer of user data from the EU to the US.&nbsp;<\/p>\n\n\n\n<p>This is because Meta was transferring personal data from the EU to the US without ensuring proper safeguards were in place. Facebook used approved terms in their contracts to cover the transfer of personal data overseas. However, these terms were insufficient to address the risks to the fundamental rights and freedoms of data subjects.<\/p>\n\n\n\n<div  class=\"box box--icon box--star\">\n    <p>The key reason for this is that the US Government has laws based on national security allowing it to access the personal data of individuals (including overseas individuals) held by US corporations without any effective safeguards or checks.<\/p>\n<\/div>\n\n\n\n<p>Consequently, the judgement will seriously affect all businesses that transfer personal data to the US. It is worth noting that since this case took place, the UK has now implemented the UK-US Data Bridge, which gives businesses another avenue to safely share personal data with the US.&nbsp;<\/p>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/181897#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>Email<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/181897' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='Hd3dAM4Rf9xcoMbR+xI0jQR3TKc1lVy07lsnDrq631hsGwzTuWrKC\/gb0iSptgUZ4COkP5dRpVL2r5w5XNaESHo6Mw9q4wNJXjZcd5dKwFrvCWA=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">What We Can Learn from Uber and Facebook<\/h2>\n\n\n\n<p>The Uber and Facebook decisions are a solid reminder to all businesses that data protection authorities continue to monitor data and privacy compliance. Failure to comply with the law can incur costly fines for businesses.\u00a0<\/p>\n\n\n\n<p>To ensure your business is compliant with data protection laws, you should:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Consider whether you can achieve your aims without sending personal data overseas. For example, determine whether you can <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/anonymised-data\/\">anonymise the data<\/a>.<\/li>\n\n\n\n<li>Assess whether the \u2018adequacy regulations\u2019 cover the transfer, that is, whether the transfer is to an approved country.<\/li>\n\n\n\n<li>If the transfer is not to an approved country, ensure you have an alternative mechanism to transfer personal data overseas, such as having \u2018appropriate safeguards\u2019 in place, including the approved contractual clauses.<\/li>\n\n\n\n<li>Before relying on \u2018appropriate safeguards\u2019, ensure you are satisfied that the relevant protections under <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/privacy-tips-startups\/\">UK data protection laws<\/a> are not undermined for people whose data is transferred.<\/li>\n\n\n\n<li>Where you have a contract with the recipient of personal data, contact a privacy lawyer to help ensure it is compliant.<\/li>\n<\/ol>\n\n\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/09\/30065809\/LV-UK-Personal-Data-Breach-Notification-Factsheet.png\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">Personal Data Breach Notification Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet outlines the steps for notifying the ICO and affected individuals about personal data breaches.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/09\/30065528\/LegalVision_UK-Personal-Data-Breach-Notification-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<p>In summary, the Uber and Facebook cases show that businesses must comply with data protection laws and think twice before sending personal data to overseas countries. To avoid making the same mistakes, thoroughly audit your business\u2019 privacy practices and comply with the UK General Data Protection Regulations. In addition, consider which countries you send personal data to, and make risk assessments to ensure such transfers are compliant.<\/p>\n\n\n\n<p>If you are concerned about how data protection laws may impact your business, our experienced <a href=\"https:\/\/legalvision.co.uk\/it-lawyers-lp\/\">data, privacy and IT lawyers<\/a> can assist as part of our LegalVision membership. For a low monthly fee, you will have unlimited access to lawyers to answer your questions and draft and review your documents. Call us today on <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or visit our <a href=\"https:\/\/legalvision.co.uk\/membership\/\">membership page<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1688345138216\"><strong class=\"schema-faq-question\">What is personal data?<\/strong> <p class=\"schema-faq-answer\">Personal data is information about a specific identifiable individual that relates to them. For example, this may include a person\u2019s name, an identification number like a National Insurance number, location information or a person\u2019s IP address.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1688345285858\"><strong class=\"schema-faq-question\">What should I do when sending personal data to a location that is not approved?<\/strong> <p class=\"schema-faq-answer\">If the location you are sending personal data to is not an approved country, you can implement safeguards to protect the transfer and receipt of personal data. You may also obtain the consent of the data subject.<\/p> <\/div> <\/div>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"9eb4f72322\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/181897\" \/>            <input value=\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Lessons from Uber and Facebook in Transferring Personal Data Overseas\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>If your business sends personal data overseas, you must ensure that you are complying with data protection laws. Recent cases found that Uber and Facebook owner, Meta, have breached data protection laws by unlawfully sending user data overseas from the EU to the US. In this article, we unpack the data protection laws concerning sending<a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\">Continue reading <span class=\"sr-only\">&#8220;Lessons from Uber and Facebook in Transferring Personal Data Overseas&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13071,"featured_media":183574,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"174653,1134,178198,174423,173784,176495","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[27],"tags":[20,21,366,798,1341],"class_list":["post-181897","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-privacy-it","tag-small-business","tag-medium-business","tag-data-privacy","tag-data-protection-rules","tag-gdpr-compliance"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Transferring Personal Data Overseas | LegalVision UK<\/title>\n<meta name=\"description\" content=\"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook&#039;s data law breaches.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Transferring Personal Data Overseas | LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook&#039;s data law breaches.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-03T01:00:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-03T04:58:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1709\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Lauren McKee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Lauren McKee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\"},\"author\":{\"name\":\"Lauren McKee\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802\"},\"headline\":\"Lessons from Uber and Facebook in Transferring Personal Data Overseas\",\"datePublished\":\"2023-07-03T01:00:57+00:00\",\"dateModified\":\"2024-10-03T04:58:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\"},\"wordCount\":1192,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg\",\"keywords\":[\"small business\",\"medium business\",\"data privacy\",\"data protection rules\",\"GDPR compliance\"],\"articleSection\":[\"Data, Privacy and IT Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\",\"url\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\",\"name\":\"Transferring Personal Data Overseas | LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg\",\"datePublished\":\"2023-07-03T01:00:57+00:00\",\"dateModified\":\"2024-10-03T04:58:59+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802\"},\"description\":\"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook's data law breaches.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345138216\"},{\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345285858\"}],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg\",\"width\":2560,\"height\":1709,\"caption\":\"UK-US Data Transfer and Agreements: What Businesses Need to Know\u00a0- LegalVision UK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data, Privacy and IT Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Lessons from Uber and Facebook in Transferring Personal Data Overseas\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802\",\"name\":\"Lauren McKee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.com.au\/wp-content\/uploads\/2024\/12\/Lauren-McKee-e1734560376313-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.com.au\/wp-content\/uploads\/2024\/12\/Lauren-McKee-e1734560376313-96x96.jpg\",\"caption\":\"Lauren McKee\"},\"description\":\"Lauren is a Practice Leader in LegalVision\u2019s Corporate and Commercial team in the United Kingdom and Australia. She works across a broad range of commercial matters. Lauren works with SMEs, startups and enterprise clients to understand their business and assist them with their contract law needs.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/lauren-mckee\/\"],\"url\":\"https:\/\/legalvision.co.uk\/author\/lauren-mckee\/\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345138216\",\"name\":\"What is personal data?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Personal data is information about a specific identifiable individual that relates to them. For example, this may include a person\u2019s name, an identification number like a National Insurance number, location information or a person\u2019s IP address.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345285858\",\"name\":\"What should I do when sending personal data to a location that is not approved?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"If the location you are sending personal data to is not an approved country, you can implement safeguards to protect the transfer and receipt of personal data. You may also obtain the consent of the data subject.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Transferring Personal Data Overseas | LegalVision UK","description":"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook's data law breaches.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/","og_locale":"en_GB","og_type":"article","og_title":"Transferring Personal Data Overseas | LegalVision UK","og_description":"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook's data law breaches.","og_url":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2023-07-03T01:00:57+00:00","article_modified_time":"2024-10-03T04:58:59+00:00","og_image":[{"width":2560,"height":1709,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg","type":"image\/jpeg"}],"author":"Lauren McKee","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Lauren McKee","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/"},"author":{"name":"Lauren McKee","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802"},"headline":"Lessons from Uber and Facebook in Transferring Personal Data Overseas","datePublished":"2023-07-03T01:00:57+00:00","dateModified":"2024-10-03T04:58:59+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/"},"wordCount":1192,"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg","keywords":["small business","medium business","data privacy","data protection rules","GDPR compliance"],"articleSection":["Data, Privacy and IT Articles"],"inLanguage":"en-GB"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/","url":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/","name":"Transferring Personal Data Overseas | LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg","datePublished":"2023-07-03T01:00:57+00:00","dateModified":"2024-10-03T04:58:59+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802"},"description":"This article explores the legal risks of transferring personal data overseas, focusing on Uber and Facebook's data law breaches.","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345138216"},{"@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345285858"}],"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/10\/26041510\/lee-campbell-6njoEbtarec-unsplash-scaled.jpg","width":2560,"height":1709,"caption":"UK-US Data Transfer and Agreements: What Businesses Need to Know\u00a0- LegalVision UK"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Data, Privacy and IT Articles","item":"https:\/\/legalvision.co.uk\/category\/data-privacy-it\/"},{"@type":"ListItem","position":3,"name":"Lessons from Uber and Facebook in Transferring Personal Data Overseas"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85feb608df22d2003a15601d69970802","name":"Lauren McKee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.com.au\/wp-content\/uploads\/2024\/12\/Lauren-McKee-e1734560376313-96x96.jpg","contentUrl":"https:\/\/legalvision.com.au\/wp-content\/uploads\/2024\/12\/Lauren-McKee-e1734560376313-96x96.jpg","caption":"Lauren McKee"},"description":"Lauren is a Practice Leader in LegalVision\u2019s Corporate and Commercial team in the United Kingdom and Australia. She works across a broad range of commercial matters. Lauren works with SMEs, startups and enterprise clients to understand their business and assist them with their contract law needs.","sameAs":["https:\/\/www.linkedin.com\/in\/lauren-mckee\/"],"url":"https:\/\/legalvision.co.uk\/author\/lauren-mckee\/"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345138216","name":"What is personal data?","acceptedAnswer":{"@type":"Answer","text":"Personal data is information about a specific identifiable individual that relates to them. For example, this may include a person\u2019s name, an identification number like a National Insurance number, location information or a person\u2019s IP address.","inLanguage":"en-GB"},"inLanguage":"en-GB"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/data-privacy-it\/transferring-data-overseas\/#faq-question-1688345285858","name":"What should I do when sending personal data to a location that is not approved?","acceptedAnswer":{"@type":"Answer","text":"If the location you are sending personal data to is not an approved country, you can implement safeguards to protect the transfer and receipt of personal data. You may also obtain the consent of the data subject.","inLanguage":"en-GB"},"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/181897","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13071"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=181897"}],"version-history":[{"count":12,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/181897\/revisions"}],"predecessor-version":[{"id":190670,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/181897\/revisions\/190670"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/183574"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=181897"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=181897"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=181897"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}