{"id":195766,"date":"2026-01-28T14:26:54","date_gmt":"2026-01-28T14:26:54","guid":{"rendered":"https:\/\/legalvision.co.uk\/?p=195766"},"modified":"2026-01-30T00:13:52","modified_gmt":"2026-01-30T00:13:52","slug":"intra-group-data-transfer-requirements","status":"publish","type":"post","link":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/","title":{"rendered":"Intra-Group Data Transfer Agreements: Legal Requirements"},"content":{"rendered":"\n<p>As the scale of data sharing amongst businesses increases globally, group companies often need to exchange data in various ways. A business might assume that sharing personal data within a corporate group is simple and low-risk. However, the law treats each company within a group as a separate legal entity. This means it has its own respective compliance responsibilities. Therefore, internal data flows and sharing must comply with legal rules.&nbsp;<\/p>\n\n\n\n<p>Internal data flows can quickly become rapid and complex as groups of companies expand, consolidate functions or operate across borders. An intra-group data sharing and transfer agreement (IGDSTA) provides a robust and tailored contractual framework for data sharing within a group of companies. Adopting these agreements can provide companies with a clear framework for documenting:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>how data flows across their group;&nbsp;<\/li>\n\n\n\n<li>how responsibilities for personal data protection are allocated; and&nbsp;<\/li>\n\n\n\n<li>which safeguards apply.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>IGDSTAs have become an important part of data practice under the <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/documents-gdpr-compliance\/\">UK GDPR<\/a>. Both small organisations and larger groups operating across multiple regulatory regimes use them.&nbsp;<\/p>\n\n\n\n<p>This article provides an introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.&nbsp;<\/p>\n\n\n    <div class=\"my-7 lg:my-10 border-y-2 border-gray-100 py-7 lg:py-10 flex flex-col sm:flex-row items-start gap-10\">\n                    <img decoding=\"async\" class=\"w-52 mx-auto my-0! rounded\" src=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001038\/uk-gdpr-factsheet.jpg\" alt=\"Front page of publication\"\n                 loading=\"lazy\" width=\"208\" height=\"298\">\n                <section>\n            <div class=\"text-2xl font-bold\">GDPR Essentials Factsheet<\/div>\n            <div class=\"body-text\">\n                <p>This factsheet sets out how your business can become GDPR compliant.<\/p>\n            <\/div>\n            \n\n<a href=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2023\/07\/04001020\/LegalVision-UK-GDPR-Factsheet.pdf\" class=\" block px-5 py-3.5 max-w-fit bg-orange button__hover transition rounded text-white font-bold text-lg no-underline uppercase leading-tight text-center\" target=\"\" rel=\"\">Download Now<\/a>        <\/section>\n    <\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\">What is a Group Company Data Sharing Agreement?<\/h2>\n\n\n\n<p><a href=\"https:\/\/legalvision.co.uk\/business-structures\/advantages-holding-company\/\">A group of companies<\/a> handling personal data in the UK must comply with the GDPR and the <em>Data Protection Act 2018<\/em>. These laws regulate how organisations can:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>collect;&nbsp;<\/li>\n\n\n\n<li>use;&nbsp;<\/li>\n\n\n\n<li>share; and&nbsp;<\/li>\n\n\n\n<li>retain personal data.<\/li>\n<\/ul>\n\n\n\n<p>An intra-group personal data sharing and transfer agreement helps companies within the same corporate group manage how they share and transfer personal data. It can assist your business to clearly record: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>why personal data is shared; <\/li>\n\n\n\n<li>how it can be used; and <\/li>\n\n\n\n<li>who is responsible for what.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Why are Group Data Sharing Agreements Important?<\/h2>\n\n\n\n<p>As large volumes of data are shared globally, <a href=\"https:\/\/legalvision.co.uk\/corporations\/intra-group-transfer\/\">IGDSTAs have become increasingly important<\/a>. They can be a key part of an organisation\u2019s wider data governance, creating order and consistency where internal data flows might otherwise be difficult to manage and track.&nbsp;<\/p>\n\n\n\n<p>They are also a valuable way to meet and demonstrate key compliance obligations. For example, they can:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>record joint-controller arrangements;&nbsp;<\/li>\n\n\n\n<li>cover controller-to-processor terms; and&nbsp;<\/li>\n\n\n\n<li>embed provisions for any necessary safeguards for international transfers.<\/li>\n<\/ul>\n\n\n\n<p>Many corporate groups run centralised functions that involve sharing personal data. For example, one company may manage IT or HR services, or hold licences used across the group. This means several entities often process personal data. The agreement should reflect these arrangements so that each company understands its responsibilities and individuals know how the companies use their personal data.<\/p>\n\n\n\n<p>As the companies involved belong to the same group, the agreement can adopt a collaborative tone whilst still imposing obligations. <\/p>\n\n\n\n<div  class=\"box box--icon box--warning\">\n    <p>Having an agreement does not replace the need for a robust compliance framework and complying with data protection principles when engaging in data sharing.<\/p>\n<\/div>\n\n\n\n\n<a href=\"#content-next\"\n   class=\"block p-4 mt-10 text-xl font-bold text-center text-white no-underline bg-gray-800 rounded-t-xl\">\n    Continue reading this article below the form\n    <i class=\"text-xl fa-regular fa-arrow-down\"><\/i>\n<\/a>\n<div class=\"px-6 pt-10 pb-12 mb-10 text-center bg-gray-100 rounded-b-xl sm:px-12 test\">\n    <div class=\"mb-8 text-2xl font-bold text-orange\">\n        Need legal advice?\n        <br>\n        <span class=\"text-lg not-prose\">\n                            Call <a href=\"tel:+448081968584\" class=\"not-prose\">0808 196 8584<\/a> for urgent assistance.\n                <br>\n                Otherwise, complete this form, and we will contact you within one business day.\n                    <\/span>\n    <\/div>\n\n    \n\n<div class=\"not-prose flex justify-center text-left gform_input_bg_white    \">\n    <script>\nvar gform;gform||(document.addEventListener(\"gform_main_scripts_loaded\",function(){gform.scriptsLoaded=!0}),document.addEventListener(\"gform\/theme\/scripts_loaded\",function(){gform.themeScriptsLoaded=!0}),window.addEventListener(\"DOMContentLoaded\",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>\"function\"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn(\"The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1.\"),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener(\"gform_main_scripts_loaded\",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener(\"gform\/theme\/scripts_loaded\",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener(\"DOMContentLoaded\",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook(\"action\",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook(\"filter\",o,r,e,t)},doAction:function(o){gform.doHook(\"action\",o,arguments)},applyFilters:function(o){return gform.doHook(\"filter\",o,arguments)},removeAction:function(o,r){gform.removeHook(\"action\",o,r)},removeFilter:function(o,r,e){gform.removeHook(\"filter\",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+\"_\"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){\"function\"!=typeof(t=o.callable)&&(t=window[t]),\"action\"==r?t.apply(null,e):e[0]=t.apply(null,e)})),\"filter\"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}});\n<\/script>\n\n                <div class='gf_browser_gecko gform_wrapper gravity-theme gform-theme--no-framework lawyer-form_wrapper gplaceholder_wrapper form-with-labels-no-asterisks_wrapper has-new-validation-error-styling_wrapper' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_2453' style='display:none'><div id='gf_2453' class='gform_anchor' tabindex='-1'><\/div><form method='post' enctype='multipart\/form-data' target='gform_ajax_frame_2453' id='gform_2453' class='lawyer-form gplaceholder form-with-labels-no-asterisks has-new-validation-error-styling' action='\/api\/wp\/v2\/posts\/195766#gf_2453' data-formid='2453' novalidate>\n                        <div class='gform-body gform_body'><div id='gform_fields_2453' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id=\"field_2453_1000\" class=\"gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1000'>Instagram<\/label><div class='ginput_container'><input name='input_1000' id='input_2453_1000' type='text' value='' autocomplete='new-password'\/><\/div><div class='gfield_description' id='gfield_description_2453_1000'>This field is for validation purposes and should be left unchanged.<\/div><\/div><div id=\"field_2453_1\" class=\"gfield gfield--type-text gfield--input-type-text gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_1'>First Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_1' id='input_2453_1' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_12\" class=\"gfield gfield--type-text gfield--input-type-text gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_12'>Last Name<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_text'><input name='input_12' id='input_2453_12' type='text' value='' class='medium'     aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_2\" class=\"gfield gfield--type-email gfield--input-type-email gf_left_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_2'>Email Address<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_email'>\n                            <input name='input_2' id='input_2453_2' type='email' value='' class='medium'    aria-required=\"true\" aria-invalid=\"false\"  \/>\n                        <\/div><\/div><div id=\"field_2453_3\" class=\"gfield gfield--type-phone gfield--input-type-phone gf_right_half gfield--width-half gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_3'>Phone<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_phone'><input name='input_3' id='input_2453_3' type='tel' value='' class='medium'   aria-required=\"true\" aria-invalid=\"false\"   \/><\/div><\/div><div id=\"field_2453_14\" class=\"gfield gfield--type-select gfield--input-type-select gfield--width-full custom-select gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_14'>Number of Employees in Your Business<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_select'><select name='input_14' id='input_2453_14' class='large gfield_select'    aria-required=\"true\" aria-invalid=\"false\" ><option value='' selected='selected'>Select ...<\/option><option value='0' >0<\/option><option value='1' >1-5<\/option><option value='6' >6-20<\/option><option value='21' >21-50<\/option><option value='51' >51-250<\/option><option value='250' >250+<\/option><\/select><\/div><\/div><div id=\"field_2453_4\" class=\"gfield gfield--type-textarea gfield--input-type-textarea gfield_contains_required field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><label class='gfield_label gform-field-label' for='input_2453_4'>Tell us about your enquiry<span class=\"gfield_required\"><span class=\"gfield_required gfield_required_text\">(Required)<\/span><\/span><\/label><div class='ginput_container ginput_container_textarea'><textarea name='input_4' id='input_2453_4' class='textarea medium'     aria-required=\"true\" aria-invalid=\"false\"   rows='10' cols='50'><\/textarea><\/div><\/div><div id=\"field_2453_5\" class=\"gfield gfield--type-html gfield--input-type-html gfield_html gfield_html_formatted gfield_no_follows_desc field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  >By submitting this form, you agree to receive emails from LegalVision and can unsubscribe at any time. View our <a href=\"https:\/\/legalvision.co.uk\/privacy-notice\/\" target=\"_blank\">Privacy Policy<\/a>. <\/div><div id=\"field_2453_8\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_8' id='input_2453_8' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='http:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/195766' \/><\/div><\/div><div id=\"field_2453_13\" class=\"gfield gfield--type-hidden gfield--input-type-hidden gform_hidden field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><div class='ginput_container ginput_container_text'><input name='input_13' id='input_2453_13' type='hidden' class='gform_hidden'  aria-invalid=\"false\" value='generic_form' \/><\/div><\/div><fieldset id=\"field_2453_999\" class=\"gfield gfield--type-checkbox gfield--type-choice gfield__uk-marketo-opt-in field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_visible\"  ><legend class='gfield_label gform-field-label screen-reader-text' ><\/legend><div class='ginput_container ginput_container_checkbox'><div class='gfield_checkbox ' id='input_2453_999'><div class='gchoice gchoice_2453_999_1'>\n\t\t\t\t\t\t\t\t<input class='gfield-choice-input' name='input_999.1' type='checkbox'  value='1'  id='choice_2453_999_1'   \/>\n\t\t\t\t\t\t\t\t<label for='choice_2453_999_1' id='label_2453_999_1' class='gform-field-label gform-field-label--type-inline'>By submitting this form, you agree to receive content and event invitations from us to help you grow your business. If you do not want to receive such messages, tick here.<\/label>\n\t\t\t\t\t\t\t<\/div><\/div><\/div><\/fieldset><\/div><\/div>\n        <div class='gform-footer gform_footer top_label'> <button type=\"submit\" id=\"gform_submit_button_2453\" class=\"gform_button button\" onclick=\"gform.submission.handleButtonClick(this);\" data-submission-type=\"submit\"><span class=\"gform_submit_button__text\">Submit Now<\/span><\/button> <input type='hidden' name='gform_ajax' value='form_id=2453&amp;title=&amp;description=&amp;tabindex=0&amp;theme=gravity-theme&amp;hash=ec2463697d0d9cef7b71236ae60964c7' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_2453' value='iframe' \/>\n            <input type='hidden' class='gform_hidden' name='gform_theme' data-js='gform_theme_2453' id='gform_theme_2453' value='gravity-theme' \/>\n            <input type='hidden' class='gform_hidden' name='gform_style_settings' data-js='gform_style_settings_2453' id='gform_style_settings_2453' value='' \/>\n            <input type='hidden' class='gform_hidden' name='is_submit_2453' value='1' \/>\n            <input type='hidden' class='gform_hidden' name='gform_submit' value='2453' \/>\n            \n            <input type='hidden' class='gform_hidden' name='gform_currency' data-currency='GBP' value='c4b1BRe7F+Ih69yxObe5lDjCL2btGUhYjP5z4gMSvU41+Z3iQXSZrkML5ILscQimuVAtLFxfqIOknTEl3ZzsFPRifZBCrWIZEumlwtOfjfCF4KY=' \/>\n            <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' \/>\n            <input type='hidden' class='gform_hidden' name='state_2453' value='WyJ7XCIxNFwiOltcIjIyODY0N2ViMWU3NTcxZjA4YTY4NGJmMDcwMTk3Y2I0XCIsXCJiMzk3YmQ1MDBmMmFjNjk1ODE4MzdmNTBhYTA2MzQ0OFwiLFwiNGYyNGZkZGEwMzlkNDUxMWFhZGE1NGYwZmQwZmNiZTdcIixcIjUyMmJkMDE2M2I2ZmEwOTI3NDZhZjU5YTg0ZmM1NDk5XCIsXCIzODRlNjk1YjQxMTAzMWFiYmQ2ODEyMGYyZWFhMDYyNlwiLFwiYjkzNDcwNTE2MjkxOGRjZWViMjQzNzRjNmE0NGVmNTlcIixcIjQxMTliODZhMzVjYzJiMWViNDZiMmQ4NjRlNGUzZmNjXCJdfSIsIjQ3MjNiMzA2ZDIyZGVkODA2N2YyMjYyOThkYzI1ODVmIl0=' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_2453' id='gform_target_page_number_2453' value='0' \/>\n            <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_2453' id='gform_source_page_number_2453' value='1' \/>\n            <input type='hidden' name='gform_field_values' value='' \/>\n            \n        <\/div>\n                        <\/form>\n                        <\/div>\n\t\t                <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_2453' id='gform_ajax_frame_2453' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'><\/iframe>\n\t\t                <script>\ngform.initializeOnLoaded( function() {gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery('#gform_ajax_frame_2453').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_2453');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_2453').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){form_content.find('form').css('opacity', 0);jQuery('#gform_wrapper_2453').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_2453').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_2453').removeClass('gform_validation_error');}setTimeout( function() { \/* delay the scroll by 50 milliseconds to fix a bug in chrome *\/ jQuery(document).scrollTop(jQuery('#gform_wrapper_2453').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_2453').val();gformInitSpinner( 2453, 'https:\/\/legalvision.co.uk\/wp-content\/themes\/legalv-v6\/img\/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [2453, current_page]);window['gf_submitting_2453'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_2453').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_2453').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [2453]);window['gf_submitting_2453'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_2453').text());}else{jQuery('#gform_2453').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger(\"gform_pre_post_render\", [{ formId: \"2453\", currentPage: \"current_page\", abort: function() { this.preventDefault(); } }]);        if (event && event.defaultPrevented) {                return;        }        const gformWrapperDiv = document.getElementById( \"gform_wrapper_2453\" );        if ( gformWrapperDiv ) {            const visibilitySpan = document.createElement( \"span\" );            visibilitySpan.id = \"gform_visibility_test_2453\";            gformWrapperDiv.insertAdjacentElement( \"afterend\", visibilitySpan );        }        const visibilityTestDiv = document.getElementById( \"gform_visibility_test_2453\" );        let postRenderFired = false;        function triggerPostRender() {            if ( postRenderFired ) {                return;            }            postRenderFired = true;            gform.core.triggerPostRenderEvents( 2453, current_page );            if ( visibilityTestDiv ) {                visibilityTestDiv.parentNode.removeChild( visibilityTestDiv );            }        }        function debounce( func, wait, immediate ) {            var timeout;            return function() {                var context = this, args = arguments;                var later = function() {                    timeout = null;                    if ( !immediate ) func.apply( context, args );                };                var callNow = immediate && !timeout;                clearTimeout( timeout );                timeout = setTimeout( later, wait );                if ( callNow ) func.apply( context, args );            };        }        const debouncedTriggerPostRender = debounce( function() {            triggerPostRender();        }, 200 );        if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) {            const observer = new MutationObserver( ( mutations ) => {                mutations.forEach( ( mutation ) => {                    if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) {                        debouncedTriggerPostRender();                        observer.disconnect();                    }                });            });            observer.observe( document.body, {                attributes: true,                childList: false,                subtree: true,                attributeFilter: [ 'style', 'class' ],            });        } else {            triggerPostRender();        }    } );} );\n<\/script>\n<\/div>\n<\/div>\n<div id=\"content-next\"><!-- scroll anchor --><\/div>\n<h2 class=\"wp-block-heading\">Considerations When Entering a Group Data Sharing Agreement<\/h2>\n\n\n\n<p>Before entering into an IGDSTA, you must analyse and develop an understanding of how personal data moves within the group structure. This typically involves:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>identifying what data is shared;&nbsp;<\/li>\n\n\n\n<li>which companies receive it;&nbsp;<\/li>\n\n\n\n<li>the purposes behind the sharing; and&nbsp;<\/li>\n\n\n\n<li>how those receiving entities use the data.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Without this practical understanding, the agreement may be drafted inaccurately, thereby creating risks.&nbsp;<\/p>\n\n\n\n<p>Organisations must still remember to comply with the core UK GDPR principles whenever they share <a href=\"https:\/\/legalvision.co.uk\/data-privacy-it\/uk-gdpr-privacy-culture-important\/\">personal data<\/a> internally. For example:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>any data sharing must be fair and lawful;&nbsp;<\/li>\n\n\n\n<li>individuals must be informed about how their data moves within the group;<\/li>\n\n\n\n<li>appropriate security measures must be in place; and&nbsp;<\/li>\n\n\n\n<li>only the minimum personal data necessary for the purpose should be shared.<\/li>\n<\/ul>\n\n\n\n<p>International transfers require particular attention and should be reflected in the agreements. Whilst transfers from the UK to countries covered by a UK adequacy regulation (such as those within the European Economic Area) may proceed without additional safeguards, transfers to other jurisdictions usually require an International Data Transfer Agreement or the UK Addendum.&nbsp;<\/p>\n\n\n\n<div  class=\"box box--icon box--info\">\n    <p>The primary purpose of an IGDSTA is to regulate personal data, but organisations might also choose to cover other information, such as confidential business data. This can simplify governance, but it must be considered carefully.<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">How Can Legal Advice Support My Business?<\/h2>\n\n\n\n<p>A data protection lawyer can assist a group of companies with drafting and updating an IGDSTA that accurately reflects internal data flows and complies with applicable rules.&nbsp;<\/p>\n\n\n\n<p>Legal advice can help clarify whether each entity is acting as a controller, joint controller, or processor, and ensure this aligns with your internal governance and records of processing activities.&nbsp;<\/p>\n\n\n\n<p>Where international transfers are involved, a data protection lawyer can:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>advise on the most appropriate safeguards;&nbsp;<\/li>\n\n\n\n<li>draft the relevant transfer documentation;&nbsp;<\/li>\n\n\n\n<li>support transfer-risk assessments; and&nbsp;<\/li>\n\n\n\n<li>guide on ways to prevent risk.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<p>Entering into an IGDSTA between group companies can demonstrate compliance and reduce risk in group data-sharing arrangements. A clear understanding of internal data flows is essential before implementing an IGDSTA to fully ensure that it is fit for purpose, accurate and effective. This agreement can offer a structured way to document data sharing and supports compliance with the UK GDPR and the <em>Data Protection Act 2018<\/em>. Legal advice can help a business ensure the agreement reflects the group\u2019s data processing activities.<\/p>\n\n\n\n<p>LegalVision provides ongoing legal support for businesses through our fixed-fee legal membership. Our experienced lawyers help businesses manage contracts, employment law, disputes, intellectual property, and more, with unlimited access to specialist lawyers for a fixed monthly fee. To learn more about LegalVision\u2019s legal membership, call <a href=\"tel:+448081968584\" class=\"AVANSERnumber dynamic-number\">0808 196 8584<\/a> or <a href=\"https:\/\/legalvision.co.uk\/membership\/\">visit our membership page<\/a>.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1769607567868\"><strong class=\"schema-faq-question\">What is a group data sharing agreement?<\/strong> <p class=\"schema-faq-answer\">A group data sharing agreement, though not legally mandatory, is essentially a contract between companies within the same corporate group. The agreement sets out how and why the companies share personal data, the roles each entity plays, and the safeguards and governance that apply to those data flows.<br \/><br \/>This can be particularly useful where your business is part of a large group company structure, and you can adopt an IGDTA to document data sharing between them.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1769607627541\"><strong class=\"schema-faq-question\">How can my organisation determine whether internal sharing arrangements involve international transfers?<\/strong> <p class=\"schema-faq-answer\">You should assess whether personal data leaves the UK, including whether members of your group remotely access it from outside the UK as part of your operations.<br \/><br \/>If your organisation transfers personal data to, or allows access from, a country without a UK adequacy regulation, it will usually need to implement safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, to ensure the transfer is lawful.<\/p> <\/div> <\/div>\n<div class=\"not-prose m-feedback-prompt\">\n    <!-- Thumbs up\/down bar -->\n    <div class=\"m-feedback-prompt__main\">\n        <div class=\"m-feedback-prompt__title\">Was this article helpful?<\/div>\n        <div>\n            <!--span class=\"m-feedback-prompt__button--text\">Thanks!<\/span-->\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--yes\"\n                    data-analytics-link=\"feedback-prompt:yes\" aria-label=\"Agree\">\n                <i class=\"fa-regular fa-thumbs-up fa-3x\"><\/i>\n            <\/button>\n            <button type=\"button\" class=\"m-feedback-prompt__button m-feedback-prompt__button--no\"\n                    data-analytics-link=\"feedback-prompt:no\" aria-label=\"Disagree\">\n                <i class=\"fa-regular fa-thumbs-down fa-3x\"><\/i>\n            <\/button>\n        <\/div>\n    <\/div>\n\n    <!-- Feedback form -->\n    <div class=\"m-feedback-prompt__form\">\n        <div class=\"m-feedback-prompt__form--thanks \">\n            <div>Thanks!<\/div>\n            <p>\n                We appreciate your feedback \u2013 your submission has been successfully received.            <\/p>\n        <\/div>\n        <form id=\"contact-form\" class=\"m-feedback-prompt__form--form\" action=\"\" method=\"post\">\n            <input type=\"hidden\" id=\"authenticity_token\" name=\"authenticity_token\" value=\"9eb4f72322\" \/><input type=\"hidden\" name=\"_wp_http_referer\" value=\"\/api\/wp\/v2\/posts\/195766\" \/>            <input value=\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\" type=\"hidden\" name=\"currenturl\"\n                   id=\"currenturl\">\n            <input value=\"Intra-Group Data Transfer Agreements: Legal Requirements\" type=\"hidden\" name=\"currenttitle\"\n                   id=\"currenttitle\">\n            <label>\n                <!-- display on thumbs-up -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--yes\">\n                    Can you tell us <span class=\"font-semibold\">why<\/span> you found it helpful?\n                <\/span>\n\n                <!-- display on thumbs-down -->\n                <span class=\"m-feedback-prompt__feedback m-feedback-prompt__feedback--no text-lg\">\n                    How can we better improve this article?\n                <\/span>\n                <textarea name=\"feedbackmessage\" id=\"feedbackmessage\" required><\/textarea>\n            <\/label>\n\n            <div class=\"m-feedback-prompt__form--error\" id=\"form-submit-error\"><\/div>\n            <button id=\"submit-contact-form-button\" type=\"submit\" name=\"commit\" class=\"m-feedback-prompt__form--submit\"\n                    data-analytics-link=\"feedback-prompt:submit\">\n                Submit            <\/button>\n        <\/form>\n    <\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>As the scale of data sharing amongst businesses increases globally, group companies often need to exchange data in various ways. A business might assume that sharing personal data within a corporate group is simple and low-risk. However, the law treats each company within a group as a separate legal entity. This means it has its<a href=\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\">Continue reading <span class=\"sr-only\">&#8220;Intra-Group Data Transfer Agreements: Legal Requirements&#8221;<\/span><\/a><\/p>\n","protected":false},"author":13436,"featured_media":191796,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","editor_notices":[],"footnotes":""},"categories":[37],"tags":[20,21,1495,1892,2568],"class_list":["post-195766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-commercial-contracts","tag-small-business","tag-medium-business","tag-uk-gdpr","tag-data-transfer","tag-group-companies"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Legal Rules for Intra-Group Data Transfers | LegalVision UK<\/title>\n<meta name=\"description\" content=\"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Legal Rules for Intra-Group Data Transfers | LegalVision UK\" \/>\n<meta property=\"og:description\" content=\"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\" \/>\n<meta property=\"og:site_name\" content=\"LegalVision UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/LegalVision\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-28T14:26:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-30T00:13:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sej Lamba\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:site\" content=\"@LegalVision_law\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sej Lamba\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\"},\"author\":{\"name\":\"Sej Lamba\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"headline\":\"Intra-Group Data Transfer Agreements: Legal Requirements\",\"datePublished\":\"2026-01-28T14:26:54+00:00\",\"dateModified\":\"2026-01-30T00:13:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\"},\"wordCount\":1066,\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg\",\"keywords\":[\"small business\",\"medium business\",\"UK GDPR\",\"data transfer\",\"group companies\"],\"articleSection\":[\"Commercial Contract Articles\"],\"inLanguage\":\"en-GB\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\",\"url\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\",\"name\":\"Legal Rules for Intra-Group Data Transfers | LegalVision UK\",\"isPartOf\":{\"@id\":\"https:\/\/legalvision.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg\",\"datePublished\":\"2026-01-28T14:26:54+00:00\",\"dateModified\":\"2026-01-30T00:13:52+00:00\",\"author\":{\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\"},\"description\":\"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.\",\"breadcrumb\":{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607567868\"},{\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607627541\"}],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage\",\"url\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg\",\"contentUrl\":\"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg\",\"width\":2000,\"height\":1333,\"caption\":\"Intra-Group Data Transfer Agreements: Legal Requirements | LegalVision UK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legalvision.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Commercial Contract Articles\",\"item\":\"https:\/\/legalvision.co.uk\/category\/commercial-contracts\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Intra-Group Data Transfer Agreements: Legal Requirements\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legalvision.co.uk\/#website\",\"url\":\"https:\/\/legalvision.co.uk\/\",\"name\":\"LegalVision UK\",\"description\":\"LegalVision is a commercial law firm in the UK with a commitment to innovation\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legalvision.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838\",\"name\":\"Sej Lamba\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"contentUrl\":\"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg\",\"caption\":\"Sej Lamba\"},\"description\":\"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/sejlamba\/\"],\"url\":\"https:\/\/legalvision.co.uk\/author\/sehajlamba\/\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607567868\",\"name\":\"What is a group data sharing agreement?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"A group data sharing agreement, though not legally mandatory, is essentially a contract between companies within the same corporate group. The agreement sets out how and why the companies share personal data, the roles each entity plays, and the safeguards and governance that apply to those data flows.<br \/><br \/>This can be particularly useful where your business is part of a large group company structure, and you can adopt an IGDTA to document data sharing between them.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"},{\"@type\":\"Question\",\"@id\":\"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607627541\",\"name\":\"How can my organisation determine whether internal sharing arrangements involve international transfers?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"You should assess whether personal data leaves the UK, including whether members of your group remotely access it from outside the UK as part of your operations.<br \/><br \/>If your organisation transfers personal data to, or allows access from, a country without a UK adequacy regulation, it will usually need to implement safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, to ensure the transfer is lawful.\",\"inLanguage\":\"en-GB\"},\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Legal Rules for Intra-Group Data Transfers | LegalVision UK","description":"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/","og_locale":"en_GB","og_type":"article","og_title":"Legal Rules for Intra-Group Data Transfers | LegalVision UK","og_description":"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.","og_url":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/","og_site_name":"LegalVision UK","article_publisher":"https:\/\/www.facebook.com\/LegalVision","article_published_time":"2026-01-28T14:26:54+00:00","article_modified_time":"2026-01-30T00:13:52+00:00","og_image":[{"width":2000,"height":1333,"url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg","type":"image\/jpeg"}],"author":"Sej Lamba","twitter_card":"summary_large_image","twitter_creator":"@LegalVision_law","twitter_site":"@LegalVision_law","twitter_misc":{"Written by":"Sej Lamba","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#article","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/"},"author":{"name":"Sej Lamba","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"headline":"Intra-Group Data Transfer Agreements: Legal Requirements","datePublished":"2026-01-28T14:26:54+00:00","dateModified":"2026-01-30T00:13:52+00:00","mainEntityOfPage":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/"},"wordCount":1066,"image":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg","keywords":["small business","medium business","UK GDPR","data transfer","group companies"],"articleSection":["Commercial Contract Articles"],"inLanguage":"en-GB"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/","url":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/","name":"Legal Rules for Intra-Group Data Transfers | LegalVision UK","isPartOf":{"@id":"https:\/\/legalvision.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage"},"image":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage"},"thumbnailUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg","datePublished":"2026-01-28T14:26:54+00:00","dateModified":"2026-01-30T00:13:52+00:00","author":{"@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838"},"description":"An introduction to the benefits and drafting considerations for an IGDSTA and how entering into this agreement can help support compliance.","breadcrumb":{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607567868"},{"@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607627541"}],"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#primaryimage","url":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg","contentUrl":"https:\/\/img.legalvision.com.au\/wp-content\/uploads\/sites\/4\/2024\/12\/06042856\/StockSnap_IHBPBLYUFE.jpg","width":2000,"height":1333,"caption":"Intra-Group Data Transfer Agreements: Legal Requirements | LegalVision UK"},{"@type":"BreadcrumbList","@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legalvision.co.uk\/"},{"@type":"ListItem","position":2,"name":"Commercial Contract Articles","item":"https:\/\/legalvision.co.uk\/category\/commercial-contracts\/"},{"@type":"ListItem","position":3,"name":"Intra-Group Data Transfer Agreements: Legal Requirements"}]},{"@type":"WebSite","@id":"https:\/\/legalvision.co.uk\/#website","url":"https:\/\/legalvision.co.uk\/","name":"LegalVision UK","description":"LegalVision is a commercial law firm in the UK with a commitment to innovation","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legalvision.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/85c8e51e5b8ce4c323980106fae16838","name":"Sej Lamba","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/legalvision.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","contentUrl":"https:\/\/legalvision.co.uk\/wp-content\/uploads\/sites\/4\/2024\/11\/cropped-Sehaj-Lamba-96x96.jpg","caption":"Sej Lamba"},"description":"Sej is a Legal Content Writer at LegalVision. She is an experienced legal content writer who enjoys writing legal guides, blogs, and know-how tools for businesses. She studied History at University College London and then developed a passion for law, which inspired her to become a qualified lawyer. Sej enjoys drawing on her legal knowledge and practical commercial acumen to draft legal content that is commercially focused and easy for businesses to understand. She is passionate about breaking down complex legal concepts into clear and valuable insights which businesses can digest and learn from. Sej has a strong interest in fast-developing areas such as data privacy law and AI and has drafted articles which have been published in leading UK legal website publications, including The Lawyer and The Law Society Gazette websites.","sameAs":["https:\/\/www.linkedin.com\/in\/sejlamba\/"],"url":"https:\/\/legalvision.co.uk\/author\/sehajlamba\/"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607567868","name":"What is a group data sharing agreement?","acceptedAnswer":{"@type":"Answer","text":"A group data sharing agreement, though not legally mandatory, is essentially a contract between companies within the same corporate group. The agreement sets out how and why the companies share personal data, the roles each entity plays, and the safeguards and governance that apply to those data flows.<br \/><br \/>This can be particularly useful where your business is part of a large group company structure, and you can adopt an IGDTA to document data sharing between them.","inLanguage":"en-GB"},"inLanguage":"en-GB"},{"@type":"Question","@id":"https:\/\/legalvision.co.uk\/commercial-contracts\/intra-group-data-transfer-requirements\/#faq-question-1769607627541","name":"How can my organisation determine whether internal sharing arrangements involve international transfers?","acceptedAnswer":{"@type":"Answer","text":"You should assess whether personal data leaves the UK, including whether members of your group remotely access it from outside the UK as part of your operations.<br \/><br \/>If your organisation transfers personal data to, or allows access from, a country without a UK adequacy regulation, it will usually need to implement safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, to ensure the transfer is lawful.","inLanguage":"en-GB"},"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/195766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/users\/13436"}],"replies":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/comments?post=195766"}],"version-history":[{"count":3,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/195766\/revisions"}],"predecessor-version":[{"id":195795,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/posts\/195766\/revisions\/195795"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media\/191796"}],"wp:attachment":[{"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/media?parent=195766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/categories?post=195766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legalvision.co.uk\/api\/wp\/v2\/tags?post=195766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}