data-protection data-storage data
Official source for Data Export legislation (UK)
<p>I need to find an official source for &quot;Data Export&quot; legislation that applies within the UK, I have searched the .GOV websites and found various pages that refer to physical item (military and dual-use) legislation but not to Digital data. I have also found references to &quot;Data sovereignty&quot; and &quot;Data Residency&quot; but these don't appear to be UK specific.</p>
<p><strong>Scenario:</strong></p>
<p><strong>Company A</strong> (UK) needs to store potentially sensitive (possibly military) data which may include communications, parts diagrams, personal data etc in an online platform that can be accessed by the sales team within the UK only.</p>
<p><strong>Company B</strong> (USA) offers such a platform, but may be hosting the data in datacentres in the USA, Ireland etc.</p>
<p>I need to find out what UK legislation covers storage location and transmission to other countries.</p>

<h2>It might be an offence</h2>
<p><a href="https://www.legislation.gov.uk/ukpga/1989/6/section/8" rel="nofollow noreferrer">Section 8</a> makes it an offence for a Crown servant or government contractor to fail to protect information covered by the Act.</p>
<p>Were you to use this service knowing that the US government has a right to inspect the data on request, you might be considered to have failed to protect it.</p>

<p>To the best of my knowledge there is no UK law covering the export of data relating to things like parts diagrams. There are controls on personal data, which are based on the EU GDPR and implemented by the <a href="https://www.legislation.gov.uk/ukpga/2018/12/contents/enacted" rel="nofollow noreferrer">Data Protection Act 2018</a>, specifically Part 3 Chapter 5.</p>
