This checklist provides guidance to in-house counsel and private practitioners when assessing whether a transfer of personal data is a restricted transfer and how to make such a restricted transfer in accordance with the UK General Data Protection Regulation (GDPR). The checklist can also be used to assist in-house counsel and private practitioners when advising internal or external clients on these issues.