An overhauled Convention 108 was signed by 20 states — including the U.K. — in early October. The Council of Europe treaty has been given an update to bring it in line with the EU General Data Protection Regulation. The European Commission sees the protocol as a way of encouraging "third countries" to adopt the basic tenets of the GDPR. This could be particularly interesting for the U.K., which will become a third country after Brexit. In this article for The Privacy Advisor, Jennifer Baker reports, "The U.K. is not in hot water yet, and all bets are off until Brexit is actually agreed upon. But as a signatory of Convention 108+, cause for concern can be further abated."
Full Story