“All UK data controllers and processors should read this and understand they will be held accountable, and must ensure they and their supply chain are compliant. Are you challenging your suppliers ( processors) to ensure they have adapted to these changes.
Simple question is to ask to see their latest DPIA,” says Lee Hibbert, Director of Digital Risk Assurance at Bamboo Technology Group.
The ICO have put together a list of FAQs about data protection now the UK transition period has ended. The FAQs cover topics such as
❓ What effect does the trade deal have on data protection?
❓ Will we need an EU representative if the UK gets an adequacy decision?
❓ what do I need to do with data collected before the end of the transition period
What effect does the trade deal have on data protection?
As part of the new trade deal, the EU agreed to delay transfer restrictions until 30 June 2021 (known as the bridge). This enables personal data to flow freely from the European Economic Area (EEA) to the UK until either adequacy decisions are adopted, or the bridge ends.
If you receive personal data from the EEA, we recommend you put alternative safeguards in place before the end of April, if you haven’t done so already.
For more information, read Data Protection at the end of the transition period and our guidance on International Transfers.
We have also produced an interactive tool on using standard contractual clauses for transfers into the UK to help you.
We will keep our guidance under review and update it as necessary to reflect any developments.
