Principle #8
http://www.ico.org.uk/for_organisations/data_protect...
"Personal data shall not be transferred to a country or territory outside the EEA unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data."
You might think that Philippines is a territory that ensures an adequate level of protection... but that is not the case...
Which countries have an adequate level of protection?
The European Commission has decided that certain countries have an adequate level of protection for personal data. Currently, the following countries are considered as having adequate protection.
Andorra
Argentina
Canada
Faroe Islands
Guernsey
Isle of Man
Israel
Jersey
New Zealand
Switzerland
Uruguay
And please have a look at this..
http://ec.europa.eu/justice/data-protection/document...
as far as I'm concerned they can process data "worldwide".. they are a global company and they surely have customer all around the world..
But they cannot process UK data "worldwide" only because they wrote a nice statement on their website..
Hope this helps..