Brexit: The State Of Play On The Consequences For Data Protection

As of 1 January 2021, the United Kingdom has definitively left the European Union: the so-called "Brexit" process has been completed. What are the consequences in terms of data protection?

With regard to data flows to the United Kingdom, which has thus become a third country, reference must be made to the Trade and Cooperation Agreement entered into on 30 December 2020 between the United Kingdom and the European Union. This agreement provides, inter alia, that the UK will continue to apply the European General Data Protection Regulation for a further period of up to 6 months (i.e. until 30 June 2021). Accordingly, during this period, any communication of personal data to the UK will be able to take place under the same rules that applied as of 31 December 2020 and will not be considered a transfer of data to a third country.