UK International Data Transfer Agreement (IDTA)

What the UK IDTA is

Following the UK's departure from the EU, the UK Government published the International Data Transfer Agreement (IDTA) — the UK's equivalent of the EU Standard Contractual Clauses — for transferring personal data from the UK to third countries.

HelmXP incorporates the IDTA (verbatim from the Information Commissioner's Office) for Hubs subject to UK GDPR where data transfers to non-UK sub-processors are involved.

Who it applies to

The IDTA applies to Hubs incorporated or operating in the United Kingdom, or to any Hub that processes personal data of UK residents.

If your organisation is subject to both EU GDPR and UK GDPR, both the EU SCCs and the UK IDTA apply. HelmXP's legal documentation covers both.

Addendum to EU SCCs

For organisations subject to both regimes, the UK ICO has published an Addendum to the EU SCCs. HelmXP supports this addendum for customers who need it. Contact your account manager to request the addendum version of your legal documentation.

Acceptance and records

Acceptance of the IDTA is part of the standard onboarding flow for UK-based Hubs. Your acceptance record — template version, timestamp, and IP address — is logged in your Hub's legal record under Manage > Legal.

Sub-processors and UK transfers

The sub-processor list published on the Trust Center includes the transfer mechanism applicable to each sub-processor from both an EU and UK perspective.