Brexit and GDPR

24 July 2019   /  Articles

Brexit will bring numerous political and social effects, but will also impact legal matters. It will also directly affect personal data controllers. If you as a data controller use services of companies that store/ process personal data in the United Kingdom, you should check whether your data processing agreement is ready for Brexit.

Despite Brexit postponement, it is still the most likely scenario – especially considering the results of the European Parliament election. Whether the deal determining the terms of the United Kingdom’s departure from the EU will be made or not is still a big unknown.

In the case of no deal Brexit, the UK will be given the so called “third country” status upon leaving the EU. This means that personal data transfer to the UK will require the application of:

  • Standard or ad hoc data protection clauses in the existing data processing agreements;
  • Binding corporate rules should data transfer occur within a group of associated entities;
  • Codes of conduct (with certification mechanisms);
  • Other special instruments available to public authorities.

Obviously in most cases the easiest solution seems to be amendment of the existing processing agreements with UK entities (as processors) with appropriate additional data protection clauses.

In terms of data transfer in the other direction, from the UK to EEA, based on the communication of the European Data Protection Board, according to the UK government, free data flow will be still possible

Author:
Grzegorz Leśniewski – attorney at law

Share

Share

Need help with this topic?

Write to our expert

Mateusz Borkiewicz

Managing Partner, Attorney at law

+48 663 683 888 Contact

Articles in this category

Signallers – how to prepare for the coming changes?

Articles

More
Signallers – how to prepare for the coming changes?

Article synopsis: “GPT chat vs personal data”.

Articles

More
Article synopsis: “GPT chat vs personal data”.

Very large online platforms and the obligation to publish advertising repositories

Articles

More
Very large online platforms and the obligation to publish advertising repositories

Obligations of online platforms under the Digital Services Act – selected issues

Articles

More
Obligations of online platforms under the Digital Services Act – selected issues

Relation of RODO to the Digital Services Act

Articles

More
Relation of RODO to the Digital Services Act
More

Contact

Any questions?see phone number+48 663 683 888
see email address

Hey, have you
signed up to our newsletter yet?

    Check how we process your personal data here