Barkley Legal Barkley Legal
  • Home
  • About us
  • Services
    • GDPR and Data Protection
    • Ts and Cs / Contracts
    • Start-up Advice
  • FAQ’s
  • Resources
  • Contact
  • Home
  • About us
  • Services
    • GDPR and Data Protection
    • Ts and Cs / Contracts
    • Start-up Advice
  • FAQ’s
  • Resources
  • Contact

You are here: Home / 2021 / January / 11

January 11, 2021

Standard

GDPR and Brexit -Are You Prepared?

What has happened to GDPR in Brexit?

First point- GDPR has not gone away. It still applies to all organisations based in the UK. It is now governed by UK GDPR rather than the EU GDPR as before.

So now:

  1. You can transfer personal data to the EU/EEA as before Brexit. (For the uninitiated EEA = EU plus Iceland, Norway, and Liechtenstein).
  2. However, for the transfer the other way EU/EEA it is more complicated. The EU-UK Trade and Cooperation Agreement signed at the death has created a ‘Bridge’ to allow ‘the continued free flow of personal data from the EU/EAA to the UK’ for up to six months.

So, what happens after six months?

Background

 To freely transfer data from the EU to a country outside the EU the country has to be considered to have Adequate provisions in place for the safety of private data. The EU has yet to rule on this. Whilst it should be expected to be no problem as we have just left the EU this cannot be assumed as being automatic as there are potential issues.

Some countries such as New Zealand, Canada and Switzerland have the benefit of their systems being deemed Adequate by the EU and data can flow freely between them and the EU. It is expected that UK will join this category but there is no guarantee this will have been approved by the end of the six months period.

The Information Commissioners Office advises businesses to make alternative arrangements for the end of the six-month period which is not an optimistic sign.

If the six-month period ends and the UK has not been deemed Adequate, then it will become a Third Country for GDPR purposes.

Then data can only be transferred to the UK if Standard Contractual Clauses (SCCs) are in place setting out the obligations of each party to ensure the proper protection of the data.

Businesses are also required to have a representative in the EU in these circumstances and to amend their policies to cover the new situation.

So get prepared.

  • January, 11
  • 526
  • Data Protection, Uncategorized
  • More

Contact Us »

Subscribe

Click here to sign up

Recent Posts

  • Terms and Conditions – Why getting them right is critical
  • What if your container was stuck in the Suez Canal
  • GDPR and Brexit -Are You Prepared?
  • Are you a Company or not ?
  • GDPR – The Myths and the Mess
  • Danger- Passwords-10 Tips

SERVICES

GDPR and Data Protection
Ts and Cs / Contracts
Start-up Advice
FAQ’s

CONTACT US

info@barkleylegal.co.uk

0759 004 7669

9-10 Cross Street Preston Lancashire PR1 3LT

 

© Barkley Legal 2018 | General T&Cs | Website T&Cs | Privacy Notice
Barkley Ltd trading as Barkley Legal. Company Number: 11065020