The Business Secretary, Rt Hon Alok Sharma MP, has urged businesses to ensure that they can lawfully receive data from clients and businesses in the EU from 1 January 2021.
Specifically, this means:
- You should take stock of the personal data you process prior to 1 January 2021.
- If you receive personal data from a company based in an EU/EEA country, you should map your data flows and put in place alternative transfer mechanisms, such as Standard Contractual Clauses (SCCs), with any relevant EU organisations (the EU has yet to make a decision as to whether they accept that the UK’s data protection regime is still adequate)
- A Standard Contractual Clause will need to be put in place to ensure data can flow freely from the 1st January 20201. This is separate from a trade deal with the EU and will have to be done in any scenario.
- Visit UK/using-personal-data-2021 for guidance on the actions your business or organisation needs to take regarding data protection and data flows.