Naq Cyber: Is your business prepared for GDPR post-brexit?
As a year like no other draws to a close, so does the transition period for the UK to negotiate a new relationship with the EU. Until now, the GDPR has remained in full force in the UK.
The exact future remains uncertain while negotiation is ongoing, however, we know that the GDPR has been adopted into the UK Data Protection Act (DPA). In practice, things won’t change a great deal when it comes to the core data protection principles, rights and obligations found in the EU Regulation.
Let us help you prepare for free
Take our quick assessment to help you get GDPR-ready for the world post-Brexit. Once you submit your answers to 10 short questions, including where you’re based, whether you have employees, customers or suppliers who are citizens or reside within the EU, and whether you transfer personal data between the UK and the EU, our in-house GDPR expert and international lawyer, Nadia, will be in touch to book your free 20-minute readiness consultation.
Essential points to know:
If you operate inside the UK, you will need to comply with UK data protection law (Data Protection Act 2018) after the end of the transition period.
If you operate in Europe, offer goods or services to individuals in Europe, or monitor the behaviour of individuals in Europe, the EU version still applies directly to you.
The GDPR will still apply to any organisations in Europe who send you data – so it will be important to implement certain safeguards to ensure data flow into the UK is not disrupted.
It’s important to note that the ICO will not be the regulation for European-specific activities that fall under the EU version of the GDPR, however it will remain the independent supervisory body regarding the UK’s data protection legislation. The ICO’s Guide to Data Protection is a useful source of advice and guidance on how to comply with UK and EU data protection rules in the run up to, and after the transition period. We recommend checking the ICO website for further updates.
