Data sharing standard 11 - Territory of Use

The territory of use describes the geographical area in which data processing is permitted under the data sharing agreement. 

1.    All data sharing agreements must state the territory of use which will be either:

• UK
• EEA
• UK and EEA
• worldwide

2. The territory of use must cover all processing locations (see standard on Data processing).

3. Adequate security assurance must be provided for all processing locations (see standard on Security).

4. Processing outside the EEA is only permitted where additional conditions have been met in relation to the proposed processing location.

Please note that this standard will be updated shortly for requirements where cloud storage/processing is occurring.

¹ General Data Protection Regulation, Chapter 5, Art. 44-50