Data Protection - Transfers Overseas

The Data Protection Act 1998 states that "Personal data shall not be transferred to a country or territory outside the European Economic Area (EEA - EU Member states together with Iceland, Liechtenstein and Norway - a list of all countries who the Commissioner deems to have adequate protection will be on the Data Protection Commissioners Web Site), unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data...". Although Mid Beds District Council has no direct dealings in personal information with any country outside the legislation, this statement becomes important with the emergence of the Internet and the Councils' increased use of Web Technologies. Any individuals whose personal details (Name, picture, etc) appear on our Web Sites, will have been equipped with the full implications of doing so, and have given their "informed" consent for their personal details to be processed in such a way.