United Kingdom: ICO disclosed Transfer Risk Assessment for Twilio/SendGrid

On 2 October 2023, the Information Commissioner's Office (ICO) disclosed the Transfer Risk Assessment (TRA) for Twilio/SendGrid, US-based technology companies that provide cloud communications and email delivery services. TRAs are documents that assess the risks associated with cross-border transfers of personal data, helping organisations meet relevant data protection obligations. The publication of the TRA follows broader concerns about data transfers to third countries, particularly in the context of evolving international data protection frameworks. The disclosure was made under the Freedom of Information Act 2000 (FOIA).