Should you require any support with undertaking a data mapping exercise of your data processing processes, please call us on 01332 226 130 or complete the form below.
Our Commercial team provides a useful overview of the impact the Brexit trade deal will have on UK data protection law.
Commmercial & Data Protection|29 January 2021
Insight
The key consequence of the UK leaving the EU is that it could eventually become a “third country” for the purposes of EU-to-UK personal data transfers.
For now, however, the UK has entered into a Trade Agreement with the EU which includes a grace period to ensure compliance with relevant data protection laws. As of 01 January 2021, and under the Trade Agreement, personal data may be transferred from the EU to the UK as if the UK has not become a third country.
The grace period started on 01 January 2021 and will last for an initial period of four months. This will then be extended by a further two months unless either the EU or the UK object.
The purpose of the grace period is to allow more time for the European Commission (EC) to consider whether to grant the UK “adequacy”. If adequacy is granted this would permit unrestricted EU-to-UK personal data transfers.
If the EC adopt a UK adequacy decision during the grace period, the grace period will automatically cease as it will no longer be needed
However, if the EC does not make a UK adequacy decision during this period, then, (subject to any other measures that are agreed in the interim), the UK will be considered a third country for personal data transfers from the expiry of the grace period.
You should monitor legal updates on whether an adequacy decision is provided to the UK to ensure you are aware of the actions you need to take to ensure ongoing compliance with both the UK and European data protection regimes.
Should you require any support with undertaking a data mapping exercise of your data processing processes, please get in touch with us.
Related Services
New legal duties require organisations to handle data protection complaints correctly. Learn what you need to do now.
Read More
How suppliers’ use of AI can create IP, data protection, and contractual risks, and how businesses can manage them.
Read More
Drop shipping is growing fast. Find out how the right contracts can protect your margins, brand and legal position.
Read More
Learn about fiduciary duties, commission disclosure, and legal compliance after the Expert Tooling v Engie ruling.
Read More
Learn how Rukhadze v Recovery Partners reinforces strict fiduciary duties and what it means for your business and governance.
Read More
The ICO and CMA's joint statement outlines new AI in finance regulations, focusing on data protection, competition, and consumer safeguards.
Read More
A decade of progress – but the fight against modern slavery isn’t over, we highlight how businesses can meet stricter transparency rules.
Read More
Navigate AI regulations in financial services. Key insights from the FCA & ICO on compliance, data protection, and innovation.
Read More
Explore how to create an AI usage policy that mitigates risks and ensures responsible adoption for your business.
Read More
Effective data safety and optimisation are key to business success, reducing risks and improving efficiency in a digital world.
Read More
Landmark EU court ruling awards damages for unlawful data transfer. Learn what this means for GDPR compliance and safeguarding your business.
Read More
Protect your SME from data breaches. Discover key tips for GDPR compliance and data security during Data Protection Week.
Read More