information outside the EEA

Under the eighth data protection principle, if an employer transfers personal information outside the European Economic Area, it must ensure that the country to which the information is transferred has adequate data protection measures in place. The EEA consists of the 27 Member States of the European Community together with Iceland, Liechtenstein and Norway. This principle does not apply if the individual has consented to the transfer of the information or if the transfer is necessary for the performance of the individual's employment contract.

eu commission: data protection

information commissioner

The EEF Employment Guide is intended to provide general guidance only. It does not purport to be comprehensive or to give legal advice. Users should always seek specific legal advice before taking or refraining from any action. Information and documents on this website are prepared in accordance with the laws of England, Wales and Scotland. Users accessing from Northern Ireland should be aware that different laws and interpretations may be applicable to Northern Ireland.