Unit CC - 6.1 Data Transference

What law dictates that personal data must not be transferred outside the EEA unless adequate protection is ensured?

• PECR

• Data Protection Act

• Freedom of Information Act

• Safe Harbour

What region allows free movement of personal data without extra legal safeguards?

• United States

• Asia-Pacific

• European Economic Area (EEA)

• Africa

What safeguard was invalidated by the CJEU in 2015 for failing to protect EU data in the US?

• GDPR

• Privacy Shield

• Safe Harbour

• Standard Contractual Clauses

What is one current legal tool used to transfer data outside the EEA safely?

• Privacy Directive

• Safe Harbour

• Standard Contractual Clauses (SCCs)

• PECR

What does PECR regulate?

• Transfers of data outside the EEA

• Criminal use of data

• Use of electronic communications and cookies

• Government surveillance

If personal data is stored in a US-based cloud data centre, it could be accessed under which law?

• GDPR

• US Patriot Act

• PECR

• Data Act 2021

What must organisations do before transferring data to countries without 'adequate' protection?

• Notify customers only

• Put safeguards like SCCs or BCRs in place

• Use PECR

• Report to the local government

What consequence can result from a serious data breach under GDPR/DPA?

• Jail sentence only

• Loss of EEA membership

• Fines up to £17.5 million or 4% global turnover

• Suspension of company website

What did the Schrems II ruling affect?

• GDPR enforcement

• PECR cookie notices

• The validity of the EU-US Privacy Shield

• EEA membership rights

Binding Corporate Rules (BCRs) are used to:

• Prevent government surveillance

• Allow international data transfers within multinational companies

• Enforce local laws

• Encrypt personal data on devices