Expanding the processing of personal data outside the EU or EEA

Apply for this amendment when the data will be processed from outside the EU or EEA.

Processing personal data from abroad is, as a rule, considered a transfer of personal data, even if the data is in a remote access environment. The transfer must have a legal basis under the General Data Protection Regulation.

Learn about the legal bases for transfers:

• Transfer of personal data outside the EU/EEA
• Transfers of personal data outside the EEA (tietosuoja.fi)