What is an administrative arrangement authorised by the ICO?

Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.

Contents

What is an administrative arrangement authorised by the ICO?

You could make a restricted transfer if it’s covered by an administrative arrangement. This is usually a document, such as a memorandum of understanding, made between a public body and:

another public body;
an international organisation; or
an organisation carrying out public functions.

This administrative arrangement must include effective and enforceable rights for the people the transferred information is about.

The administrative arrangement must be authorised by us.

Before you rely on the authorised administrative arrangement as a safeguard, you must complete a TRA to make sure the standard of protection for people’s information is not materially lower after you transfer it.

You can submit your administrative arrangement for authorisation by emailing [email protected].