Data transfers to the UK post Brexit
In a post-Brexit world where the UK is no longer part of the European Economic Area (“EEA”), the UK will be a ‘third country’ from the point of view of international transfers of personal data, and hence have to satisfy one of the grounds on which such transfers can be made in the GDPR. The standard adequacy approach is deemed insufficient by the government, not reflecting the ‘breadth and depth of the UK-EU relationship’ and also failing to enable effective co-operation to enforce data protection principles internationally.
Read full article: Data transfers to the UK post Brexit | Gowling WLG