3/02/2021
-
When the Brexit transition period ended at the end of 2020, the United Kingdom (UK) officially left the European Union (EU) single market and customs union. This means that for the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679 or GDPR), the UK is a third country with regards to data transfer. As a third country, personal data transfers require additional safeguards. At the beginning of 2021, the EU-UK Trade and Cooperation Agreement came into effect. A part of this Agreement includes a provision which allows data transfers to continue without additional mechanisms until an adequacy decision is adopted, for a maximum of six months.