DRAFT EU ADEQUACY DECISION PAVES THE WAY FOR SMOOTH EU-UK DATA FLOWS POST-BREXIT

In March, the European Commission announced a preliminary determination that the UK provides adequate privacy protections, a critical step for personal data transfers between the EU and the UK after Brexit. The GDPR restricts the transfer of personal data outside the European Economic Area (EEA), and the UK’s recent departure from the EU means that companies will need a valid mechanism to transfer personal data to the UK—now considered a “third country” for purposes of the GDPR. Although companies can rely upon Standard Contractual Clauses or Binding Corporate Rules, companies should be mindful that there may be new obligations created post-Brexit with respect to data processing.

Read more

Posted Under: United Kingdom

Post By Ken Shafton (2,325 Posts)