Are you a business operator or a public authority? Is your company or authority based in the EU and does it transfer personal data to the United Kingdom?
If you answered “yes” to both questions, we have the latest information for you regarding the transfer of personal data following the end of the transition period, which began with the United Kingdom’s withdrawal from the European Union and lasted from January 31, 2020, through the end of 2020.
Based on information from the website of an independent British authority established to protect rights and on a decision by the British government, the General Data Protection Regulation (GDPR) will remain in effect in the United Kingdom for the next 6 months starting in 2021. According to Information Commissioner Elizabeth Denham, this is good news at this stage. Organizations and public authorities will therefore not have to interrupt the free flow of their data from the EU to the UK in the coming months.
However, once the six-month period ends, the UK will be considered a third country for the purposes of personal data transfers, which means that data controllers will have to implement appropriate security measures, such as adopting standard contractual clauses.
We will keep you informed of further developments or changes.
