As the uncertainty around Brexit continues, questions remain
about the future of personal data. What precautions must be taken
before sending data to the UK? With firms still adjusting to the
GDPR, planning for data transfers following Brexit presents yet
another challenge. In this article we will look at what to do if
the withdrawal agreement is passed, and if it's
not—resulting in a "no deal" Brexit.
For more guidance on this topic from the CNPD, read this article (French).
Scenario 1: the withdrawal agreement is ratified
No action required.
If the withdrawal agreement is passed, then the EU data
protection rules will continue to apply in the UK during the
transition period (30 March 2019 to 31 December 2020). In this
case, concerned institutions will not have to apply any specific
additional procedures if they engage in transfers to the UK after
29 March 2019.
