Overview
Course Outcomes
Agenda
Trainers
CPD
In-house Training

Book online

Event Summary

The Data Use and Access Act 2025 (DUAA) introduces new flexibility in how UK organisations manage international data transfers. Our timely International Data Transfers online training course is designed for professionals in legal, compliance, and data protection roles, providing the knowledge and tools necessary to remain compliant and informed.

Learn what qualifies as a “restricted transfer” under UK GDPR, how the DUAA affects global data sharing, and why the Schrems II ruling still matters after Brexit. Understand how to use the UK Addendum, set up Binding Corporate Rules (BCRs), and apply Article 49 derogations where appropriate.

This course will also cover the International Data Transfer Agreement (IDTA), how it compares to the EU’s Standard Contractual Clauses (SCCs), and when to use each. Learn about Transfer Risk Assessments (TRAs), adequacy decisions, and how to check laws in other countries.

Led by Tim Turner, an expert in data protection, this training provides clear and practical insights into the current challenges of international compliance. By the end of the course, you will be equipped to manage international data transfers with clarity, confidence, and full compliance.

Trainers

Tim Turner

Data Protection Expert and Trainer

Who should attend

This course is ideal for professionals across public, private, and not-for-profit sectors, including:

Data Protection Officers and Teams
Compliance Teams
Data Teams
Information Risk Teams
CEOs and COOs
IT Managers and Database Managers
Legal Professionals
Anyone involved in data handling and transfers

Online Training

Participate in live training online
Group work and practical scenarios
Course materials

The course has really developed my understanding on privacy and data protection, and I feel like I now have open channels to enquire through should I have a question in future.
Lou Abbott-Williams, Eurofins Agroscience Services

Enthusiastic and engaged trainer. Kept the pace / tempo going well.
Chenab Mangat, CLC

I got some really useful pointers out of the session. The trainer delivery was really good. Also he was informative and being able to ask questions throughout was useful.
Sarah Jones, Newport City Council

Course Outcomes

Identify what qualifies as a “restricted transfer” under UK GDPR and understand its impact
Understand how the Data Use and Access Act 2025 (DUAA) affect international data sharing after Brexit
Recognise when to use the UK Addendum, Binding Corporate Rules (BCRs), and Article 49 derogations
Distinguish between the UK’s International Data Transfer Agreement (IDTA) and the EU’s Standard Contractual Clauses (SCCs), and know when each applies

Agenda

09:45 - 10:00

Course Introduction

Tim Turner

Data Protection Expert and Trainer

10:00 - 10:30

International Data Transfers and GDPR’s Territorial Reach

What constitutes a ‘restricted transfer’ under UK GDPR
The UK GDPR’s extraterritorial scope, including the Clearview AI case
Adequacy decisions: current status with EU and UK/US
Real-world examples: customers abroad, staff overseas, non-UK processors

10:30 - 11:00

Schrems II: Impact and Application

Summary of the Schrems II decision and its implications
Why transfers to third countries are now more complex
Legal uncertainty and the role of supplementary measures
How Schrems II affects UK organisations post-Brexit

11:00 - 11:15

Morning Break

11:15 - 12:00

ICO’s International Data Transfer Agreement (IDTA)

Structure and scope of the IDTA
Key differences from EU Standard Contractual Clauses
When and how to use the IDTA
The DUAA’s new ‘Data Protection Test’ for transfers

12:00 - 13:00

Transfer Risk Assessments (TRA))

What is a TRA and when is it required
Step-by-step guide to conducting a TRA
Assessing third-country laws and practices
Documenting and evidencing your assessment

13:00 - 14:00

Lunch Break

14:00 - 14:30

Using UK Addendum with EU Standard Contractual Clauses (SCCs)

Purpose and structure of the UK Addendum
When to use the Addendum with EU SCCs
Benefits and limitations of this hybrid approach
Practical examples and drafting tips

14:30 - 15:00

Binding Corporate Rules (BCRs) and Derogations

Overview of BCRs: what they are and who uses them
Derogations under Article 49: consent, contract, public interest
When derogations are appropriate (and when they’re not)
Case studies: staff abroad, urgent transfers, foreign subsidiaries

15:00 - 15:15

Afternoon Break

15:00 - 15:15

Best Practices and Common Pitfalls

Common mistakes in international transfer compliance
Tips for working with foreign suppliers and partners
Keeping documentation up to date
How to stay ahead of regulatory changes

15:45 - 16:00

Review of the Day

Summary of key takeaways
Useful resources and compliance toolkit
Final questions and feedback

16:00

Close of Course

Tim Turner

Data Protection Expert and Trainer

CPD

This training is CPD certified.

Contribute 6 hours towards your Continuing Professional Development (CPD)
Receive a certificate of attendance.

In-house Training

Westminster Insight provides bespoke training at a time and place to suit you and your organisation’s needs. All our courses can be provided online, at your place of work or a venue of your choice. Additionally, we can tailor or create a course to suit the exact needs of your organisation. We will discuss the learning outcomes with you and tailor the training to the needs of your organisation.

Benefits of in-house training:

Flexible – Schedule a course date and times that work best for you and your teams. Upskill your teams immediately as training needs arise. Choose from in-person or online and bring your teams together to learn in an interactive, friendly environment.

Cost-effective – Train groups of individuals working in the same organisation without incurring travel or accommodation costs.

Customised Content – Our experienced trainers work with you to ensure that the course content is tailored to meet the needs of your teams and organisation. Benefit from the opportunity to have in-depth discussions about scenarios in your organisation in a confidential forum.

Find out more about our tailored training solutions by contacting us at learning@westminsterinsight.com

Download Training Catalogue

Caldicott Guardian Online Training

Wednesday 3rd December 2025

Data and Technology Training Courses

Data Protection Essentials Online Training

Monday 19th January 2026

Data and Technology Training Courses

Corporate Governance and Risk Management Online Training

Thursday 29th January 2026

Government and Policy Training Courses

International Data Transfers

Online Training

Event Summary

Course Outcomes

Agenda