The Information Commissioner’s Office (ICO) has issued guidance to small and medium sized organisations to prepare for all possible outcomes in the event of a no-deal Brexit. The advice focuses on ways to maintain data flows between the UK and EU member states, should the UK depart without a deal.
Currently, there are no restrictions on personal data flow, as the UK is an EU member state. However, In the event of a no-deal Brexit, additional measures will need to be implemented so that data flows from the European Economic Area (EEA) to the UK remain lawful. The sharing of personal data between the UK and the EU is critical both for the proper functioning of business supply chains and for the effective delivery of public services by public authorities.
The ICO’s guidance provides strategies to maintain data flows, such as using pre-approved contractual terms, which are already in use as a way of legitimising transfers of data outside of the EEA. To read the full advice, click here.