Data protection Brexit readiness tool for UK organisations

1 2 3 4 5 6 7

When the transition period ends on 31 December 2020, the UK will become a ‘third country’ in relation to the EU. This change will have impact on the processing of personal data of EU data subjects by UK organisations and cross-border transfers of personal data. It is important to consider the implications of this change on the way that your organisation processes personal data.

To help you identify the relevant issues, we have created this tool (please note that it reflects legal and regulatory position as on 25 November 2020). Please note that it flags up the requirements that will need to be satisfied by UK organisations if by the end of the transition period, the European Commission fails to recognise the UK as a country providing adequate protection for EU personal data. Should an adequacy decision be made prior to 1 January 2021, personal data can continue to flow freely between the UK and EEA and some of the measures referred to below will not be required. Given that no firm declaration by the EU has been forthcoming to date, it is prudent to prepare for the new data protection obligations that may apply to your organisation in ‘no adequacy decision’ scenario.

You will receive your results via email.

Do you have an establishment (office, branch or other stable arrangements) in the EU?

The Legal 500 - The Clients Guide to Law Firms

UK Chambers logo

Best Companies - One to watch logo

Cyber Essentials Certification Logo