Content is continuously being updated as negotiations develop.
The position now
GDPR is a European Regulation and will continue to apply to UK businesses until the end of the implentation period therefore personal data can continue to be shared between UK and EEA countries.
The position in 2021
In 2021, after the implementation period, the transfer of personal data between the UK and Ireland will no longer be automatically compliant under the GDPR. The UK government has said that UK personal data can continue to flow into the EEA, but we do not know if personal data can continue to flow from the EEA to the UK. It is likely that one of the following scenarios will then apply.
What steps can I take now?
Be compliant
Ensure you are compliant with GDPR now.
Gain an understanding of your data
Understand your international flows of personal data. Key transfers to identify will be from the EEA to the UK and consider how you may continue to receive these transfers lawfully in 2021.
Take action
Review your privacy information and documentation to identify any changes that need to be made in 2021.
