Intermediaries should:

• consider how personal sensitive data is transferred between data controllers and data processors based in the UK and in the EEA

• work with partners to ensure that appropriate safeguards are implemented with respect to the transfer of data and understand whether additional actions are required with regards to data transfers.