Data protection - UK-US data bridge - a factsheet for UK organisations

Following a review of the current handling and protection of personal data, the UK and US have established a "data bridge". This allows personal data to freely move between UK businesses and certified organisations in the US.

International data transfers are central to the transactions of many businesses, and under previous arrangements, any transfer of personal data to the US required costly contract clauses to ensure privacy and protection standards.

Now, where the US organisation is appropriately certified, the new bridge removes this burden.

A US organisation is placed onto the Data Privacy Framework List (DPF list) on the DPF website once they have been certified. They can then receive UK personal data through a UK-US data bridge.

UK businesses will need to ensure they update their privacy policies and document their data processing activities to reflect any changes in how they transfer personal data to the US.

See: https://www.gov.uk/government/publications/uk-us-data-bridge-supporting-documents/uk-us-data-bridge-factsheet-for-uk-organisations