Expanding the processing of personal data outside the EU and EEA

  • The processing of personal data abroad is counted as transfer of personal data even if the data is in a remote operating environment. Read more about transferring personal data and the legal bases for this on the Office of the Data Protection Ombudsman’s website (tietosuoja.fi).
  • Indicate in which countries is the data currently being processed.
  • As data is being transferred outside the EU/EEA, specify the legal basis, in accordance with the General Data Protection Regulation (GDPR), that is needed for the transfer of data.
  • Indicate, to which country outside the EU/EEA would you like to expand the data processing to.