Amendments to UK data protection law in the event the UK leaves the EU without a deal on 29 March 2019

Department for Digital, Culture, Media & Sport.

Department for Digital, Culture, Media and Sport (DCMS) have published an introduction to how UK data protection law will work in the unlikely event the UK leaves the EU without a deal here

The regulations and more detailed guidance will be published in the next few weeks. These regulations would:

Preserve EU GDPR standards in domestic law
Transitionally recognise all EEA countries (including EU Member States) and Gibraltar as ‘adequate’ to allow data flows from the UK to Europe to continue
Preserve the effect of existing EU adequacy decisions on a transitional basis
Recognise EU Standard Contractual Clauses (SCCs) in UK law and give the ICO the power to issue new clauses
Recognise Binding Corporate Rules (BCRs) authorised before Exit day
Maintain the extraterritorial scope of the UK data protection framework
Oblige non-UK controllers who are subject to the UK data protection framework to appoint representatives in the UK if they are processing UK data on a large scale.