Section 119A Standard clauses for transfers to third countries etc

(1)

F1The F2Commission may issue a document specifying standard data protection clauses which the Commission considers F3are capable of securing that the data protection test set out in Article 46 of the UK GDPR or section 75 of this Act (or both) is met in relation to transfers of personal data.

(2)

The Commission may issue a document that amends or withdraws a document issued under subsection (1).

(3)

A document issued under this section—

(a)

must specify when it comes into force,

(aa)

F4may make provision generally or in relation to types of transfer described in the document,

(b)

may make different provision for different purposes, and

(c)

may include transitional provision or savings.

(4)

Before issuing a document under this section, the F5Commission must consult the Secretary of State and such of the following as the Commission considers appropriate—

(a)

trade associations;

(b)

data subjects;

(c)

persons who appear to the Commission to represent the interests of data subjects.

(5)

After a document is issued under this section—

(a)

the F6Commission must send a copy to the Secretary of State, and

(b)

the Secretary of State must lay it before Parliament.

(6)

If, within the 40-day period, either House of Parliament resolves not to approve the document then, with effect from the end of the day on which the resolution is passed, the document is to be treated as not having been issued under this section (so that the document, and any amendment or withdrawal made by the document, is to be disregarded for the purposes of Article 46(2)(d) of the UK GDPR).

(7)

Nothing in subsection (6)—

(a)

affects any transfer of personal data previously made in reliance on the document, or

(b)

prevents a further document being laid before Parliament.

(8)

The F7Commission must publish—

(a)

a document issued under this section, and

(b)

a notice identifying any document which, under subsection (6), is treated as not having been issued under this section.

(9)

The Commission must keep under review the clauses specified in a document issued under this section for the time being in force.

(10)

In this section, “the 40-day period” means—

(a)

if the document is laid before both Houses of Parliament on the same day, the period of 40 days beginning with that day, or

(b)

if the document is laid before the Houses of Parliament on different days, the period of 40 days beginning with the later of those days.

(11)

In calculating the 40-day period, no account is to be taken of any F8whole days that fall within a period during which Parliament is dissolved or prorogued or during which both Houses of Parliament are adjourned for more than 4 days.

(12)

In this section, “trade association” includes a body representing controllers or processors.

Annotations

Textual amendments

F1: S. 119A inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 51 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F2: Word in s. 119A(1)(2) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
F3: Words in s. 119A(1) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 20(2) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
F4: S. 119A(3)(aa) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 20(3) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
F5: Word in s. 119A(4) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
F6: Word in s. 119A(5)(a) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
F7: Word in s. 119A(8)(9) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
F8: Words in s. 119A(11) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 17; S.I. 2025/904, reg. 2(y)