GDPR at the end of the transition period

GDPR at the end of the transition period

Author: Lowri Morgan-Macdonald

When the transition period comes to an end after 31 December 2020, the ‘EU GDPR’ will no longer apply to the UK. However, the GDPR will be brought into UK law as the ‘UK GDPR’ to sit alongside the current Data Protection Act 2018.

In practice therefore, there are unlikely to be many changes in the underlying principles, rights and obligations that apply in the UK under the UK GDPR, at least at the outset. However, there will be some key implications for you if you have an establishment in the European Economic Area (EEA), have customers or monitor individuals in the EEA, or if you transfer personal data to or from the EEA. If you fall within any of these categories, you may need to take some additional steps in order to continue with your current operations after the end of the transition period.

For more information on the steps that you may need to take, please see our article Data Protection and Brexit – what steps do you need to take? or contact a member of the Data Privacy and Cyber Security Team.