Section 72Overview and interpretation

(1) This Chapter deals with the transfer of personal data to third countries or international organisations, as follows—

(a)
sections 73 to 76 set out the general conditions that apply;
(b)
section 77 sets out [^F1additional conditions that apply in certain cases] where the intended recipient of personal data is not a relevant authority in a third country or an international organisation [^F2(see section 73(4)(b))];
(c)
section 78 makes special provision about subsequent transfers of personal data.

(2) In this Chapter, “relevant authority”, in relation to a third country, means any person based in a third country that has (in that country) functions comparable to those of a competent authority.

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

F1 Words in s. 72(1)(b) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 2(a); S.I. 2026/82, reg. 2(z10)
F2 Words in s. 72(1)(b) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 2(b); S.I. 2026/82, reg. 2(z10)

Commencement Information

I1 S. 72 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

https://dpa2018.digiphile.law/article/article-72.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.