Contract analysis

1. EXECUTIVE SUMMARY This Transfer Impact Assessment ("TIA" or "Assessment") has been prepared by Calderwood & Harkness LLP on behalf of Northgate Telecommunications PLC ("NTP" or the "Data Exporter") to assess whether the laws and practices of the United States of America afford an essentially equivalent level of protection to personal data transferred from NTP to Caldwell Analytics Inc. ("Caldwell" or the "Data Imp

2. METHODOLOGY 2.1 Legal Framework for the Assessment This Assessment has been conducted in accordance with the following legal framework and regulatory guidance: EU GDPR — Article 46(1) and (2)(c). Article 46(1) of the EU GDPR provides that, in the absence of an adequacy decision pursuant to Article 45(3), a controller or processor may transfer personal data to a third country or an international organisation only i

3. DESCRIPTION OF THE TRANSFER 3.1 Data Exporter The data exporter is Northgate Telecommunications PLC, a public limited company incorporated under the laws of England and Wales, with company number 04837291. NTP is a leading telecommunications operator in the United Kingdom and the European Union, providing fixed-line, mobile, and broadband services to consumer and business customers. NTP's UK operations are conduct

4. ASSESSMENT OF US LAWS AND PRACTICES 4.1 Overview of the US Legal Framework for Government Access to Data The assessment of the US legal framework focuses on the laws and practices that govern government access to personal data held by private entities such as Caldwell. The central question, as established by the Schrems II judgment, is whether the US legal framework provides data subjects whose personal data is tr

Section 702 operates by compelling "electronic communication service providers" — as defined in 50 U.S.C. § 1881(b)(4) — to assist the government in acquiring foreign intelligence information. The definition of "electronic communication service provider" is broad and encompasses any provider of an electronic communication service, a remote computing service, or any other communication service provider who has access

Section 702 is subject to certain procedural safeguards. The FISA Court issues annual certifications approving the government's targeting procedures (which govern how the government determines that a particular target is a non-US person reasonably believed to be located outside the US) and minimisation procedures (which govern the handling, retention, and dissemination of non-publicly available information about US p