Data Protection and International Data Transfers

Transfers of Personal Data outside of the QFC must take place only when:

  • The country or jurisdiction is on the QFC list of adequate jurisdictions – see the list of approved jurisdictions on the Data Protection Resources page.
  • The transfers are made using the appropriate safeguards, such as the QFC’s Standard Contractual Clauses.
  • A specific derogation applies – such as those outlined in Article 24(3) of the Regulations.
  • In limited circumstances – as outlined in Article 24(4) of the Regulations.

See the Data Protection Resources page for the list of adequate jurisdictions and for the QFC’s Standard Contractual Clauses.