Sharing of personal data with importers in third countries and international organisations

3 facts on personal data transfers

What is a third country? What is a personal data transfer? What is a legal basis for personal data transfers?

A country that is not a part of EU/EEA. 

Sharing of personal data with an importer located in a third country. 

You must identify a legal basis for the transfer of personal data in the GDPR. The legal basis for the transfer is not the same as the legal basis for the processing of personal data. When transferring personal data you must both have a legal basis for the transfer and for the processing in general.

If you are going to transfer personal data to countries outside EU/EEA – so-called third countries- or international organisations, you must be aware that you will need a legal basis for the transfer of personal data.  

The purpose of having a legal basis for the transfer of personal data is to ensure that the protection one has according to the GDPR is not diluted when the personal data is transferred to countries outside EU/EEA or international organisations that are not subject to the GDPR.  

At AU there is a common solution on how to establish a legal basis for the transfer for personal data. Which model in the solution that apply to your project depends on the third country and the importer.    

Views
Video: Clear legal basis for the transfer of personal data enables collaboration with partners in third countries In this video, Carsten Bøcker Pedersen, professor in Economy at CIRRAU, explains how to handle personal data and how AU’s common solution for transfer of personal data makes it possible to share personal data with partners in third countries. It is important in order to be able to collaborate with other universities e.g., in the United States.

Help to determine legal basis

If you are going to share personal data with others outside EU/EEA or an international organisation, you must contact Technology Transfer Office at tto@au.dk in advance. TTO can help you determine which legal basis that apply in your case.