The UK is in preparation to leave the EU at 11.00 pm today. What does this mean for GDPR?
The ICO has issued a statement reassuring business that for the time being (until the end of the Brexit transition period, the end of December 2020) it is "business as usual for data protection".
During the transition period:
1. the GDPR continues to apply, you should continue to follow existing GDPR guidance;
2. data flows between the EU and UK can continue unrestricted;
3. if your UK business offers goods or services to the EU, you do NOT have to appoint an EU representative;
4. the ICO can continue acting as your lead data protection authority;
The outcome for the post-transition period data protection landscape remains uncertain. In the meantime, the ICO maintains a full suite of Brexit guidance here.
During this period, which runs until the end of December 2020, it will be business as usual for data protection.