Brexit is here!

Many UK based businesses will be affected after 31 December 2020. Small changes after the transition period are expected, what exactly - we don’t know everything yet.

Here is what we do know

At the beginning of 2021, the UK will be officially identified as a third country for the EU, according to the EU General Data Protection Regulation (GDPR).

The current GDPR requirements will be retainеd in the UK domestic law. The key principles, rights and obligations about processing personal data will remain the same.

If you are a UK-based Controller or Processor offering goods or services to the European Economic Area (EEA) and you have no offices, branches or other establishments, you still need to comply with EU GDPR. You will be required to appoint a Representative in the EEA, set up in the country where the individuals whose personal data you are processing are located. Details about your European Representative should be included in your Privacy Notice or published on your website. The Representative may be an individual, organization or a private company. The easiest way to appoint him or her is under a simple Service Contract.

Other points to consider

Assets

• All your hardware and software will need to be assessed in order to know what needs to be protected

Data Transfer

• When transferring data outside the UK, data regulations need to be considered
• When transferring personal data to the UK, the impact of the EU rules needs to be considered

Supply Chains

• Ensure your business are able to maintain the supply chain after Brexit
• New supplier relationships will be formed. Keeping the best security practices should be considered as high priority

Information and technology

• Is any of your data hosted in an EU country (including cloud storage)?
• Do any of your employees travel within the EU? Do they have mobile phone coverage for both data and calls?

Data

• Do you hold personal data about people based in the EU on UK servers?

Professional qualifications

• Do you provide any services that are restricted to people holding a relevant qualification?

If you have any questions or concerns about protecting your business after Brexit, please do not hesitate to contact us directly!