CHAPTER 4U.K.[F1Cooperation, professional secrecy and data protection]

Article 29U.K.Disclosure of personal data to third countries

1.[F2The FCA may transfer personal data to a third country where the transfer does not contravene Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, or the Data Protection Act 2018; but such transfer may only be made on a case-by-case basis.] The [F3FCA] shall ensure that the transfer is necessary for the purpose of this Regulation and that the third country does not transfer the data to another third country unless it is given express written authorisation and complies with the conditions specified by the [F3FCA]F4....

F52.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3.Where a cooperation agreement provides for the exchange of personal data, it shall comply with [F6Regulation (EU) 2016/679 and the Data Protection Act 2018].