Here are the key data protection provisions of the proposed Brexit deal that was announced Thursday:
What it says:
- The EU will start assessing adequacy of the UK for the purpose of cross-border transfers with the aim of finalizing by end of 2020.
- The UK will establish a regime recognizing transfers to the EU during the same time frame.
What we think this means for 2020:
- From now until December 2020, cross-border transfers to and from the UK will remain as they are now, meaning they will not require special cross-border transfer mechanisms as required by Chapter V of GDPR. (e.g. BCR’s or Standard Contractual Clauses).