A A A

What should I know about transferring personal data to the U.S. and the new Privacy Shield agreement?

By Myriam Fellous-Sigrist, on 21 June 2017

Privacy Shield Fact SheetFollowing the agreement between the European Commission and United States in 2016, the ‘EU-US Privacy Shield’ is now in force and is therefore the main means of allowing personal data to be transferred to the US.

The EU-US Privacy Shield replaces the invalidated Safe Harbour agreement whilst providing additional obligations to protect personal data, as well as establishing annual monitoring and reporting.

Any new agreement to transfer personal data (including transient transfer) can only be done if the US recipient (this includes universities) has signed up to the Privacy Shield Framework.

Researchers planning on transferring data to the US to a recipient that has not signed up to the Privacy Shield Framework, or who are already working under an existing Safe Harbour agreement, should contact the UCL Data Protection Office (data-protection@ucl.ac.uk).

Further information about the EU-US Privacy Shield can be found on the UCL Data Protection webpages.

Transfer of data overseas – News about the Safe Harbour Agreement

By Myriam Fellous-Sigrist, on 12 November 2015

The European Court of Justice has recently ruled that the European Commission (EC) decision on the use of the US Safe Harbour agreement for transferring personal data from the European Economic Area to the USA was invalid.

This decision will have implications for all those that regularly transfer identifiable information to companies or organisations based in the United States.

The immediate implication is that UCL cannot enter into any new agreements which involve the transfer of personal data to the United States that rely on Safe Harbour. Read more about this decision and implications for UCL researchers.