In view of the Schrems II judgment (case C-311/18), the Vice-Chancellor decided 17 November that no new transfers of personal data to third countries are allowed unless the person responsible for the transfer has checked and documented that the transfer is compatible with the General Data Protection Regulation (GDPR).
With regard to existing agreements and collaborations, anyone responsible for a transfer of data must monitor the transfer and take measures to ensure that it is compatible with the GDPR. The decision means that research and teaching staff at Uppsala University must document transfers of personal data to third countries.