Home | Business Law | Data Protection and GDPR in a post Brexit World

Data Protection and GDPR in a post Brexit World

October 22nd 2020
 

Joanne Stronach Director and Head of Employment & HR provides an some important information.

After the Brexit transition period ends on 31st December 2020, the EU GDPR will no longer be law in the UK. However, as the UK government intends to write the GDPR into UK law, from all practical perspectives, GDPR will continue to apply.

This means UK organisations and individuals that process or transfer the personal data of EU-27 citizens from the EU to the UK may need to take action to continue the free flow of data from the EU to the UK and guarantee the protection of EU data subjects. The action required will vary according to whether there is a deal (as set out in any withdrawal agreement) or no deal.

After transition, the UK will be a “third country” until the EU makes an adequacy decision regarding the UK. Until then, the transfer of personal data from the EEA to the UK will only be allowed if ‘appropriate safeguards’ are in place. Such safeguards include Standard Contractual Clauses (SCCs). SCCs must be inserted into contracts (whether controller to controller or controller to processor) before Brexit, and their wording must follow that approved by the European Commission.      

Transfers of personal data to the EU/ EEA from the UK will not be affected and transfers to and from countries outside of the EU/EEA will be subject to the same rules as now.

The Information Commissioner’s Office (ICO) has published a checklist of six steps that businesses can take now to start preparing for data protection compliance in the event of no-deal.

The government has also produced guidance on using personal data after Brexit.

Here to Help

To help SMEs prepare for Brexit, the UK200Group of which Cartmell Shepherd Solicitors are proud members of, have produced some useful materials including:

Preparing for Brexit: A Guide for SMEs

15point Action Plan

Brexit brings with it many changes, therefore it’s important that you take the necessary actions to protect your business and ensure you can continue to trade.

If you are looking for guidance and advice that is specific to your business and circumstances, please contact Joanne on 01228 585714.

Share on Facebook Twitter LinkedIn Email
We'll call you...
 
This website uses cookies
This site uses cookies to enhance your browsing experience. We use necessary cookies to make sure that our website works. We’d also like to set analytics cookies that help us make improvements by measuring how you use the site. By clicking “Allow All”, you agree to the storing of cookies on your device to enhance site navigation, analyse site usage, and assist in our marketing efforts.
These cookies are required for basic functionalities such as accessing secure areas of the website, remembering previous actions and facilitating the proper display of the website. Necessary cookies are often exempt from requiring user consent as they do not collect personal data and are crucial for the website to perform its core functions.
A “preferences” cookie is used to remember user preferences and settings on a website. These cookies enhance the user experience by allowing the website to remember choices such as language preferences, font size, layout customization, and other similar settings. Preference cookies are not strictly necessary for the basic functioning of the website but contribute to a more personalised and convenient browsing experience for users.
A “statistics” cookie typically refers to cookies that are used to collect anonymous data about how visitors interact with a website. These cookies help website owners understand how users navigate their site, which pages are most frequently visited, how long users spend on each page, and similar metrics. The data collected by statistics cookies is aggregated and anonymized, meaning it does not contain personally identifiable information (PII).
Marketing cookies are used to track user behaviour across websites, allowing advertisers to deliver targeted advertisements based on the user’s interests and preferences. These cookies collect data such as browsing history and interactions with ads to create user profiles. While essential for effective online advertising, obtaining user consent is crucial to comply with privacy regulations.