In late Spring 2018, inboxes across Europe were being clogged up
with emails from businesses, eager to explain how their privacy
notices had been updated to cater for a new EU law: GDPR.
Roughly 18 months later, Northern Irish businesses ought now to
be considering how they may continue to be subject to the
requirements of GDPR and equivalent UK legislation from the end of
the year, including how GDPR will continue to apply to their
customers and suppliers in the EU27, and whether GDPR might block
the sending of personal data from the EU27 to the UK.
As of the end of the Transition Period, the UK will become a
“third country” for the purposes of GDPR and, unless a
Brexit deal is reached or a decision of adequacy is made by the
European Commission before then (in which case, businesses would
breathe a sigh of relief that not much as much needs to change in
how they operate), additional measures and contractual documents
will be needed to ensure cross-border data
