05/02/2021
The Brexit transition period ended on 31 December 2020. The government has incorporated GDPR into UK law as the UK GDPR.
The EU has agreed to delay transfer restrictions for at least four months which can be extended to six months (bridge). After this period, if the EU Commission make adequacy decisions about the UK, most requested f the data protection rules affecting small to medium sized businesses will stay the same.
If you are a UK business or organisation that already complies with the GDPR and has no contacts or customers in the EEA, you do not need much more to be data protection compliant.
If you are a UK business or organisation that receives personal data from contacts in the EEA, you need to take extra steps to ensure that the data can continue to flow if the bridge ends without adequacy.
If you are a UK business with an office, branch or other established presence in the EEA, or if you have customers in the EEA, you need to comply with both UK and EU data protection regulations. You may need to designate a representative in the EEA.
