United Kingdom: Information Commissioner's Office disclosed Transfer Risk Assessments for Canva

On 4 April 2025, the Information Commissioner's Office (ICO) disclosed the Transfer Risk Assessment (TRA) for Canva, an Australia-based platform that provides graphic design and visual communication tools. TRAs evaluate the legal, technical, and procedural measures in place for cross-border personal data transfers, aiming to ensure alignment with the UK’s data protection standards. These assessments help determine whether adequate protections are in place for international personal data transfers. The release contributes to greater visibility into how companies navigate the legal responsibilities tied to cross-border data flows. The disclosure was made under the Freedom of Information Act 2000 (FOIA).