Archived Gibraltar Regulatory Authority website

TRANSFER OF PERSONAL DATA OUTSIDE OF GIBRALTAR

With the growth of global markets it is increasingly necessary for businesses or organisations to transfer data to other countries and territories outside of Gibraltar.

When such transfers include personal data it is important to ensure that this data is adequately protected from potential misuse by ensuring that the transfer complies with the provisions of the Data Protection Act 2004 (DPA).

This advice note (attached below) is intended to give guidance on how to comply with the Transfer of Personal Data to Third Countries but it is also important to remember that transfers of personal data must comply with all the Data Protection Principles.