Holding data

UK is no longer part of the EU so it has the Data Protection Act 2018 and the UK GDPR which is almost identical to the EU GDPR. I suggest you follow the ICO guidelines, which is the UK Data Protection Authority for transfers of data because many steps to implement will depend on the country where data are stored or processed. You will need to apply UK GDPR to data processing worldwide.

If you need to know more about how to transfer data in third countries under the EU GPDR here you can find more information:

• 3 steps for data transfers according to GDPR: https://advisera.com/articles/3-steps-for-data-transfers-according-to-gdpr/
• Free webinar – How to make personal data transfers to other countries compliant with GDPR: https://advisera.com/webinars/how-to-make-personal-data-transfers-compliant-with-gdpr-free-webinar-on-demand/

You can also consider enrolling in this free online training EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course/