Extract to table

This Policy sets out the principles, procedures, and decision-making framework that must be followed before any international transfer of personal data is initiated, continued, or materially varied

3 Any additional entity that becomes a subsidiary or affiliate of NTP PLC and that processes personal data subject to the UK GDPR or the EU GDPR shall be brought within the scope of this Policy within 90 days of its incorporation, acquisition, or commencement of relevant processing activities

(b) All transfers of personal data to recipients in countries or territories that do benefit from an adequacy decision, where reliance on that adequacy decision must be documented in accordance with the NTP Group's accountability obligations

Such transfers remain subject to the NTP Group Data Protection Policy (NTP-DP-POL-001) and must be documented in the ROPA where applicable

Such transfers must nonetheless be documented in the ROPA

In the event that either adequacy arrangement is revoked, suspended, or allowed to expire, the DPO shall immediately initiate a review to bring affected transfers within the full scope of this Policy