Make international data transfers easier to understand with this practical Transfer Risk Assessment (TRA) Guidance Sheet, designed for UK businesses, data protection professionals and anyone responsible for UK GDPR compliance.
 
Updated for the Data (Use and Access) Act 2025 and the international transfer regime in force from 5 February 2026, this downloadable guide explains the move from the previous “essential equivalence” test to the new “not materially lower” standard for assessing overseas data transfers.
 
This easy-to-follow 5-page PDF guide covers when a Transfer Risk Assessment is required, the key risks you need to consider and the different approaches available for completing your assessment. It also includes a simple decision tree, a step-by-step TRA process, common pitfalls and practical guidance on where to find the relevant ICO tools and resources.
 
Inside the guide:
When you need to complete a Transfer Risk Assessment
The updated UK GDPR international data transfer test
How to assess destination-country and enforceability risks
The ICO TRA Tool, EDPB approach and UK Government published analysis
A step-by-step guide to completing your TRA
Common mistakes to avoid
Practical tips for keeping your assessment proportionate and up to date
Guidance on when specialist legal advice may be appropriate
 
Ideal for small businesses, consultants, compliance professionals, data protection leads and organisations transferring personal data outside the UK.