The European Data Protection Board adopted a statement on the end of the Brexit transition period. Once the Brexit deadline passes Dec. 31, the EDPB notes data transfers from the European Economic Area to the U.K. "will constitute a transfer of personal data to a third country" under the EU General Data Protection Regulation. Should the European Commission and the U.K. fail to reach an agreement on adequacy, "such transfer will require appropriate safeguards as well as enforceable data subject rights and effective legal remedies for data subjects, in accordance with Article 46 GDPR." Editor's note: Promontory Senior Principal John Bowman, CIPP/E, CIPM, FIP, wrote about the Brexit adequacy negotiations between the EU and U.K. for The Privacy Advisor.
Full Story