As we all continue to try to grapple with the implications of a
no-deal Brexit, the last week or two has seen the publication of a
few things of interest from a data protection perspective:
The EDPB's view of data transfers in a no-deal
Brexit scenario
On 12 February 2019, the European Data Protection Board (the
"EDPB") published a general information
note on data transfers under the GDPR in the event of a no-deal
Brexit (available here). In summary, the information note
provides that organisations must comply with the GDPR when
transferring personal data from the EU to the UK, which will become
a "third country" for GDPR purposes (from 00.00 am CET on
30 March 2019). No new or additional safeguards are contemplated by
the EDPB which effectively means that organisations must choose
between:
