Data protection and data flows

The issue of data protection and data flows, post-Brexit, is the fundamental question for the digital and tech sectors. As Europe prepares to move into GDPR, the first continent-wide data protection overhaul in 23 years, it is critical for UK businesses to have legal certainty about the UK’s adoption of GDPR. Without GDPR, the UK would need to achieve equivalence and adequacy with any domestic data protection legislation it might choose to adopt. Given the chaos and congestion Brexit is causing in general, it would be all but impossible for the UK to come up with this legislation in time.

GDPR is one piece of a healthy data flow framework, and the UK is not a healthy country by any measure. Other issues, ranging from the ePrivacy directive to passenger name records, have barely been touched upon.

Relevant policy:

Progress and developments: