Despite the whirlwind of uncertainty surrounding the UK's
departure from the EU without agreement (a "no deal"
scenario), the UK government remains resolute that such an outcome
is unlikely considering the mutual interests of the UK and the EU
in securing a negotiated outcome before 29 March 2019. However
should this not be the case, what would this mean for data
protection in the UK?
Currently, the rules which govern the collection and use of
personal data are set at an EU-level by the General Data Protection
Regulation (GDPR). In the UK, the Data Protection Act 2018 (which
came into force on 25 May 2018) incorporates and supplements the
standards set out in the GDPR and ultimately provides for a
comprehensive data protection framework.