UK GDPR: transfers to Morocco, Tunisia and Madagascar
None of these countries is covered by UK adequacy regulations, so personal data sent there needs appropriate safeguards: the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, assessed against the data protection test introduced by the Data (Use and Access) Act 2025.
- IDTA or UK Addendum attached to the processing contract
- Transfer assessment documented before access is granted
- Least-privilege, logged access with no local copies of files