Data sharing with the EEA

Now that we have left the EU, 'data sharing' with the EEA is a key area to consider. How your business is affected depends on several factors, including the nature of your business and where your customers are located.

The Government has legislated so that UK firms can continue to lawfully send personal data from the UK to the EEA and 13 other countries that the EU has deemed to provide an adequate level of protection of personal data. they have also announced that the UK-EU Trade and Cooperation Agreement provides for the continued free flow of personal data from the EU and EEA to the UK until adequacy decisions are adopted, for no longer than 6 months.

The Information Commissioner's Office (ICO) states that the agreement between the UK and the EU enables businesses and public bodies across all sectors to continue to freely receive data from the EU (and EEA). However, as a sensible precaution, the ICO recommends that businesses work with EU and EEA organisations who transfer personal data to them, to put in place alternative transfer mechanisms to safeguard against any interruption to the free flow of EU to UK personal data.

This means that businesses and organisations can be confident in the free flow of personal data from 1 January, without having to make any changes to their data protection practices.

For more information, please click here to be redirected to the ICO's website.

The new rules will take some time to "bed in" and we will keep you updated on practical actions to take as new rules or agreements are made between the UK and the EU.