§ Bob SpinkTo ask the Secretary of State for Trade and Industry what assessment she has made of the potential impact upon an individual's rights under UK data protection legislation arising from the move of call centres and data processing offshore. [153731]
§ Ms HewittWhere a company established in the UK either processes personal data itself in another country or has personal data processed on its behalf under contract by a company in another country, the UK company retains full responsibility for ensuring that the processing complies with the requirements of the Data Protection Act 1998. In particular, UK companies must comply with the eighth Data Protection Principle which prohibits the transfer of personal data from the UK to a country or territory outside the EEA unless that country or territory ensures an adequate level of data protection.