ICO publishes no deal guidance on data transfers
The ICO has provided additional information on how international data transfers will be impacted if the UK leaves the EU without a deal in March 2019.
The Information Commissioner’s Office (ICO) has today published additional guidance for businesses about the impact on data transfers in the event of the UK leaving the EU with no deal in March 2019. The guidance follows a planned amendment to the Data Protection No Deal Technical Notice published by the Government.
Personal data is able to flow freely among EU (and EEA) Member States as they all are part of the same data protection framework, however once the UK leaves the EU, it will be leaving that framework and the automatic ability for data to flow between the UK and EU will come to an end. There are mechanisms to facilitate data transfers, set out in the EU’s General Data Protection Framework. techUK has previously published information on the impact of the UK leaving the EU on data protection and data transfers. You can see techUK’s report ‘No Interruptions’ which sets out the impact and possible solutions here.
techUK supports the commitments reached in both the Withdrawal Agreementand the Political Declaration on the Future Relationship, agreed between the UK Government and European Union, which would see continued free flow of data during the transition period and a commitment for both the UK and EU to agree adequacy agreements by the end of the transition period which would allow the continued free flow of data.
However, while it is not the intention of the UK Government to leave the EU with no deal next year, it is important that businesses are able to plan for all possible eventualities, and so this additional guidance from the ICO is welcome, which provides further clarity around the types of arrangements businesses might need to implement when transferring data from the UK to the EEA, EEA to the UK and from the UK to other non-EEA countries.
The ICO’s guidance takes the form of four elements:
- A Six Steps To Take Guide
- Detailed guidance on impact of leaving EU with no withdrawal agreement
- Interactive online tool/guide to implement Standard Contractual Clauses (SCCs)
Commenting on the guidance, Elizabeth Denham, Information Commissioner, said:
“The basis on which the UK will leave the EU has still to be decided. The Government has made clear that GDPR will be absorbed into UK law at the point of exit so there will be no substantive change to the rules that most organisations need to follow. But organisations that rely on the transfers of personal data between the UK and the European Economic Area (EEA) may be affected.
“Personal information has been able to flow freely between organisations in the United Kingdom and European Union without any specific measures as we have had a common set of rules - the GDPR. This two way flow of personal information without specific measures will no longer be the case if the UK leaves the European Union without a withdrawal agreement that specifically provides for the continued flow of personal data.”
If you would like to find out more about techUK’s work on data protection and the impact of Brexit on international data transfers please contact Jeremy Lilley.
Latest News from
techUK's Future Mobility Services in the UK Campaign Week12/04/2021 13:15:00
Get involved in techUK's first ever Future Mobility Services in the UK Campaign Week, running from 24 – 28 May!
New techUK guidance for SMEs on modern slavery12/04/2021 11:25:00
Modern slavery is a major crime that all businesses need to be aware of and is very prevalent in the UK with over 100,000 estimated victims.
Let’s use our heads to solve digital exclusion09/04/2021 16:05:00
On 20 April, techUK will host its Open Finance and Inclusion Summit. During the conference's final panel, sponsored by LexisNexis Risk Solutions, speakers will explore how to unlock digital finance for all.
Digital Inclusion Might be The Best Approach to The Future Of Cash09/04/2021 12:20:00
Few countries have taken to digital payments as enthusiastically as the UK. With Covid-19 accelerating pre-existing trends in consumer behaviour, digital payments have overtaken cash as the most popular means of paying for goods and services.
Financial Inclusion - The Global Issue09/04/2021 09:05:00
Financial exclusion is a major problem globally with billions of people unable to access standard financial services.
How banks can achieve the promise of open banking with a data mesh architecture08/04/2021 16:05:00
The changes that banking is set to undergo over the next decade will be both radical and fundamental. CDOs should use this opportunity to drive greater organisational agility through agile approaches to enterprise data architecture.
Sea of change requires a new agility to surge ahead in Open Banking08/04/2021 14:15:00
Banks, once so serene, now find themselves in a sea of change that demands a new type of agility.
Open Finance: why it is so important particularly in relation to geospatial and urban planning data08/04/2021 12:05:00
It has been said many times that data is the oil of the digital age, but this metaphor is frequently misunderstood.
Who owns your bank data?08/04/2021 10:20:00
For years, the answer to this question was straightforward: your bank. But then digitisation happened, and with it came many new services: Spotify suggested music you might like, Uber plotted your best route home. Slowly, people started to see the power of data to deliver more convenient and personal services.
Digital Markets Unit set up in Competition and Markets Authority07/04/2021 15:10:00
A DCMS press release has confirmed the ‘shadow’ launch of the Digital Markets Unit based in the Competition and Markets Authority to start looking at how codes of conduct would work in practice to promote competition in digital markets.