This Webinar took place on 26th November 2020
This webinar discussed the potential implications of Brexit on data transfers and GDPR considerations, with four potential outcomes: an extension to the transition period, a formal trade agreement, a separate agreement on data flows, or a no deal scenario. Companies need to keep in mind Binding Corporate Rules, appoint EU or UK representatives, and have appropriate safeguards in place when transferring personal data. UK-based organizations must abide by GDPR regulations if they offer goods or services to EU-based clients and must abide by GDPR and relevant privacy legislation. With the revised standard contractual clauses expected to take effect in early 2021, organizations need to review their contractual arrangements and nominate an alternative European member state if they have designated London as their main establishment. The article further discussed Article 49 and upcoming Brexit deadlines, stressing the importance of appointing an appropriate representative if necessary and revising privacy notices and policy documents. Controllers and processors need to comply with GDPR obligations in both Northern Ireland and the Republic of Ireland. The Privacy Shield had been decommissioned following a decision by the European Court of Justice.