Captured statutory text (L5)
3 Adequate level of protection
(1)For the purposes of Part 2 of the Data Protection Act 2018 and the UK GDPR, the Secretary of State specifies the United States of America as ensuring an adequate level of protection of personal data for a transfer described in paragraph (2).
(2)A transfer described by this paragraph is a transfer of personal data which—
(a)is to a person in the United States of America who is indicated on the Data Privacy Framework List as participating in the UK Extension to the EU-US Data Privacy Framework; and
(b)will be subject to the EU-US Data Privacy Framework Principles on receipt by that person.
Full captured verbatim text
(1) For the purposes of Part 2 of the Data Protection Act 2018 and the UK GDPR, the Secretary of State specifies the United States of America as ensuring an adequate level of protection of personal data for a transfer described in paragraph (2). (2) A transfer described by this paragraph is a transfer of personal data which— (a) is to a person in the United States of America who is indicated on the Data Privacy Framework List as participating in the UK Extension to the EU-US Data Privacy Framework; and (b) will be subject to the EU-US Data Privacy Framework Principles on receipt by that person.