Brexit and GDPR

24 July 2019   /  Articles

Brexit will bring numerous political and social effects, but will also impact legal matters. It will also directly affect personal data controllers. If you as a data controller use services of companies that store/ process personal data in the United Kingdom, you should check whether your data processing agreement is ready for Brexit.

Despite Brexit postponement, it is still the most likely scenario – especially considering the results of the European Parliament election. Whether the deal determining the terms of the United Kingdom’s departure from the EU will be made or not is still a big unknown.

In the case of no deal Brexit, the UK will be given the so called “third country” status upon leaving the EU. This means that personal data transfer to the UK will require the application of:

  • Standard or ad hoc data protection clauses in the existing data processing agreements;
  • Binding corporate rules should data transfer occur within a group of associated entities;
  • Codes of conduct (with certification mechanisms);
  • Other special instruments available to public authorities.

Obviously in most cases the easiest solution seems to be amendment of the existing processing agreements with UK entities (as processors) with appropriate additional data protection clauses.

In terms of data transfer in the other direction, from the UK to EEA, based on the communication of the European Data Protection Board, according to the UK government, free data flow will be still possible

Author:
Grzegorz Leśniewski – attorney at law

Share

Share

Need help with this topic?

Write to our expert

Mateusz Borkiewicz

Managing Partner, Attorney at law

+48 663 683 888 Contact

Articles in this category

DORA on the horizon: key changes for the financial sector 🏦

Articles

More
DORA on the horizon: key changes for the financial sector 🏦

What must an employer bear in mind when employing minors?

Articles

More
What must an employer bear in mind when employing minors?

What should the Policy on the use of AI systems contain?

AI

More
What should the Policy on the use of AI systems contain?

Signallers – how to prepare for the coming changes?

Articles

More
Signallers – how to prepare for the coming changes?

Article synopsis: “GPT chat vs personal data”.

Articles

More
Article synopsis: “GPT chat vs personal data”.
More

Contact

Any questions?see phone number+48 663 683 888
see email address

Hey, have you
signed up to our newsletter yet?

    Check how we process your personal data here