The browser you are using is not supported by this website. All versions of Internet Explorer are no longer supported, either by us or Microsoft (read more here: https://www.microsoft.com/en-us/microsoft-365/windows/end-of-ie-support).

Please use a modern browser to fully experience our website, such as the newest versions of Edge, Chrome, Firefox or Safari etc.

The rules for personal data transfer to the USA and UK have changed

Published 3 September 2020

The conditions for personal data transfer to the USA changed on 16 July 2020 when the so-called Privacy Shield – an agreement between the EU and USA on the protection of privacy and personal data – was declared invalid by the EU Court of Justice.

This means that transfers of personal data to the USA based on the Privacy Shield are no longer lawful. Regarding transfers to the UK, the General Data Protection Regulation (GDPR) will apply up to and including 31 December 2020. A decision has yet to be taken on what applies after that date.

What does this mean for LU?

Within a very short timeframe the University needs to review agreements and collaborations that contain personal data transfers to the USA and possibly the UK to determine if there are other legal grounds that can be applied. It is likely that agreements need to be renegotiated.
It is therefore recommended that, as a preparatory step, all faculties and administrative divisions should identify any current transfers to the USA and the UK, as well as document how these personal data transfers are processed today.

If you have any questions or need support, please contact the data protection officer at dataskyddsombud [at] lu [dot] se.

Read more about how to proceed under "Transfer of personal data to a third country".

 

Latest news

Link to rss
All news
Page manager: anna [dot] mansfeld [at] kommunikation [dot] lu [dot] se | 18 Nov 2020