EU Exit: ICO's resources on data protection and EU exit
Guidance to help businesses comply with data protection law
The EU-UK Trade and Cooperation Agreement creates a 'bridging mechanism' to enable the free flow of data until adequacy decisions for the UK can be put in place.
The bridging mechanism will last for up to six months after 1 January 2021. As a precaution, before and during the bridging mechanism, you should work with EU/EEA organisations who transfer personal data to you to put in place alternative transfer mechanisms to safeguard against any interruption to the free flow of EU to UK personal data.
The Information Commissioner's Office (ICO) has published guidance to help UK businesses and organisations keep personal data flowing with the EU and the EEA after 1 January 2021.
Check what you need to do:
- Guidance for UK businesses and organisations who have no contacts or customers in Europe
- Guidance for UK businesses and organisations who send or receive data to or from Europe
- Guidance for UK businesses and organisations with a European presence or with European customers
- Guidance for UK businesses and organisations who send or receive data to or from countries outside Europe
You can also use the ICO's Keep data flowing from the EEA to the UK – interactive tool to help you decide whether standard contractual clauses (SCCs) can help you maintain the flow of data from the EEA to the UK.