Decide whether a restricted transfer is lawful – adequacy, IDTA or UK Addendum, or an exception – and record the new “data protection test” introduced by the Data (Use and Access) Act 2025.
Data protection & GDPR
International Data Transfer Risk Assessment
About this document
A transfer risk assessment for sending or making personal data available outside the UK. It helps you identify whether a transfer is restricted, choose the right transfer mechanism, and – where you rely on appropriate safeguards such as the International Data Transfer Agreement (IDTA) or the UK Addendum – document that the “data protection test” is met: that the standard of protection after transfer will not be materially lower than in the UK.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Data protection & GDPR
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
