Transfers of Personal Data outside of the QFC must take place only when:

• The country or jurisdiction is on the QFC list of adequate jurisdictions – see the list of approved jurisdictions on the Data Protection Resources page.
• The transfers are made using the appropriate safeguards, such as the QFC’s Standard Contractual Clauses.
• A specific derogation applies – such as those outlined in Article 24(3) of the Regulations.
• In limited circumstances – as outlined in Article 24(4) of the Regulations.

See the Data Protection Resources page for the list of adequate jurisdictions and for the QFC’s Standard Contractual Clauses.