Covid-19 Update: We are continuing to provide our usual services whilst maintaining the safety of clients and colleagues. Read our latest update here.

Complete the form below to ask us a question or make an enquiry. We’ll get back to you via phone or email as soon as possible.

Insights

GDPR after Brexit

Posted on 27th February 2020 in Intellectual Property

Posted by

Dan Griffin

Associate and Solicitor
GDPR after Brexit

Post Brexit and during the transition period of the withdrawal agreement the GDPR will continue to apply in the UK.

What happens after the transition period ends?

This depends on the outcome of negotiations between the UK and EU. Strictly the GDPR will no longer apply however the UK government has committed to incorporating the GDPR into UK law and has already substantially done so via the Data Protection Act 2018. Business should assume that the GDPR will apply for the foreseeable future.

Whatever the outcome, the GDPR will still apply to businesses which trade in the EU in relation to their activities in the EU.

Is the UK a ‘third country’ for the purpose of data transfers from the EU or EEA?

The GDPR restricts data transfers from countries within the EEA to countries outside the EEA. These restrictions will apply to the UK after the transition period ends.

The least onerous means of complying with these restrictions is for an ‘adequacy decision’ to be in place from the European Commission which states that the UK provides equivalent protection to personal data. The Commission has hinted at granting an adequacy decision but one is not yet in place and there is no guarantee it will be before the end of the transition period.

This means (pending the outcome of negotiations with the EU) transfers from the EEA to the UK will have to comply with one or more of the other requirements of third country transfers set out in the GDPR. These include binding corporate rules, standard contractual clauses and consent in limited circumstances.

UK businesses need to prepare for the end of the transition period now and the possible absence of an adequacy period or face being unable to receive data from the EU after the transition period ends.

Company & Industry

Related Insights

Insights

Charlotte's Erb's Palsy Story

Posted on 18th October 2021 in Medical Negligence

Charlotte shares her powerful Erb's Palsy story, and how it has impacted both her and her families lives.

Posted by

Simon Mansfield

Partner and Solicitor
Insights

What to do when a loved one has lost the mental capacity to deal with their own affairs

Posted on 15th October 2021 in Safeguarding Vulnerable Clients

When a person loses mental capacity, they cannot usually put a Power of Attorney in place. Instead, in order to appoint someone to make decisions for them, an application needs to be made to the Court of Protection to appoint a deputy.

Posted by

Emma Ruttley

Solicitor