Brexit: Implications For Data Protection And The General Data Protection Regulation In The UK

Brexit will have fundamental implications for the UK data protection regime. Until Brexit takes place, there will be a period during which its precise form and implications for UK data protection laws are not clear. This interim period comes at a time when data controllers are already anticipating the significant changes that will be made by the General Data Protection Regulation ("GDPR") from 25 May 2018.

The GDPR will significantly update EU data protection law, harmonize data protection rules across the Member States and grant individuals important new rights to control the use of their personal data. It will extend the scope of EU data protection rules to a wider range of non-EU entities and increase obligations on those processing personal data. The GDPR significantly increases penalties for noncompliance, to a maximum of €20 million or, if greater, 4 percent of global turnover.