New EU Model Clauses from May 2010

    March 2010

    Virtually all businesses in the UK will be data controllers of the personal data they process. Where a data controller (or his processor) wishes to process personal data outside the European Economic Area ("EEA"), he must demonstrate that there is an adequate level of protection for personal data in that country. Since 2001, one way of doing this has been for the data controller to enter into an agreement in the form of the EU Model Clauses with its processor (for instance any supplier of services based outside of the EEA and processing data on the data controller's behalf) whereby the processor agrees to be bound by certain obligations beneficial to the data controller and the individual whose personal data is proposed to be transferred.