{"id":6933,"date":"2020-02-29T22:46:00","date_gmt":"2020-02-29T21:46:00","guid":{"rendered":"https:\/\/korolko.pl\/?p=6933"},"modified":"2020-03-01T22:53:20","modified_gmt":"2020-03-01T21:53:20","slug":"gdpr-in-great-britain-after-brexit","status":"publish","type":"post","link":"https:\/\/korolko.pl\/en\/blog\/gdpr-in-great-britain-after-brexit\/","title":{"rendered":"GDPR in Great Britain After Brexit"},"content":{"rendered":"

It happened. Since February 1st<\/sup>, 2020, Great Britain finally stopped to be the member of the European Union. Does anything change with respect to personal data of EU citizen processed in the United Kingdom or personal data of British citizens processed in the European Union? In today\u2019s post I’m trying to answer this question.<\/p>\n

Transition Period<\/h2>\n

Great Britain left the EU on the basis of the Agreement on the withdrawal of the United Kingdom of Great Britain and Northern Ireland from the European Union and the European Atomic Energy Community (2019\/C 66 I\/01). That agreement introduced a transition period which will last until the end of 2020. Article 127 sec. 1 of the agreement stipulates: \u201cUnless otherwise provided in this Agreement, Union law shall be applicable to and in the United Kingdom during the transition period\u201d. It means that until December 31st<\/sup>, 2020, nothing will change in the scope of personal data processing in the United Kingdom. The General Data Protection Regulation (GDPR) is still in force also within the territory of Great Britain and personal data transfer from the EU to Great Britain is allowed (according to the rules determined in GDPR).<\/p>\n

What After Transition Period?<\/h2>\n

The transition period will last only until 31st<\/sup> December, 2020. And what next? So far it is not clear. Everything depends on subsequent negotiations and arrangements between the EU and Great Britain. Some hints are included in Article 71 of the agreement on the withdrawal of the United Kingdom from the European Union, according to which:<\/p>\n

    \n
  1. Union law on the protection of personal data shall apply in the United Kingdom in respect of the processing of personal data of data subjects outside the United Kingdom, provided that the personal data:\n
      \n
    1. were processed under Union law in the United Kingdom before the end of the transition period; or<\/li>\n
    2. are processed in the United Kingdom after the end of the transition period on the basis of this Agreement.<\/li>\n<\/ol>\n<\/li>\n
    3. Paragraph 1 shall not apply to the extent the processing of the personal data referred to therein is subject to an adequate level of protection as established in applicable decisions under Article 45(3) of Regulation (EU) 2016\/679 or Article 36(3) of Directive (EU) 2016\/680.<\/li>\n
    4. To the extent that a decision referred to in paragraph 2 has ceased to be applicable, the United Kingdom shall ensure a level of protection of personal data essentially equivalent to that under Union law on the protection of personal data in respect of the processing of personal data of data subjects referred to in paragraph 1.<\/li>\n<\/ol>\n

      What is it going to look like in practice? I don\u2019t know. However, in the worst case sec. 3 stipulates, that the United Kingdom will ensure a level of protection of personal data essentially equivalent to that in the EU law. Perhaps data transfer to Great Britain will not be so problematic.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

      It happened. Since February 1st, 2020, Great Britain finally stopped to be the member of the European Union. Does anything change with respect to personal data of EU citizen processed in the United Kingdom or personal data of British citizens processed in the European Union? In today\u2019s post I’m trying to answer this question. Transition…<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_wp_rev_ctl_limit":""},"categories":[315],"tags":[765,769,317],"post_series":[],"class_list":["post-6933","post","type-post","status-publish","format-standard","hentry","category-personal-data-protection","tag-brexit-en","tag-gdpr","tag-personal-data","entry","no-media"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts\/6933"}],"collection":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/comments?post=6933"}],"version-history":[{"count":0,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts\/6933\/revisions"}],"wp:attachment":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/media?parent=6933"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/categories?post=6933"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/tags?post=6933"},{"taxonomy":"post_series","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/post_series?post=6933"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}