The UK data protection legislation prohibits the transfer of personal data outside the UK unless appropriate safeguards are in place.

This doesn’t just apply to electronic data! 

A transfer includes both physical and electronic personal data. For example, if you were to send a DNA sample from the UK to Germany, this is an international transfer of data!

Adequacy Decision Countries 

An "adequacy decision" is a status granted by the UK to a country, territory, or sector within a country, indicating that it provides an adequate level of data protection comparable to that of the UK. In simpler terms, it means it has been assessed that the country, territory, or sector provides ‘adequate’ protection for people’s rights and freedom regarding their personal data. 

This decision allows for personal data to flow from the UK to the recipient (in an area granted an adequacy decision) without the need for additional data protection safeguards. 

If personal data is being transferred to somewhere without UK Adequacy Decisions, you need to decide whether the transfer can be made subject to appropriate safeguards.