During the transitional period, the UK`s data protection standard has not changed. EU data protection laws, including the General Data Protection Regulation (GDPR), apply throughout the transition period, alongside the Data Protection Act 2018. The Information Commissioner remains the UK`s independent data protection regulator. The RGPD applies mainly to managers and processors (with a few exceptions) in the European Economic Area (EEA). The UK has left the EU and is now in a transition phase until 31 December 2020. At the end of the transitional period, the United Kingdom will become a third country. Third countries are countries outside the RGPD zone (EU Member States, Norway, Liechtenstein and Iceland). The RGPD limits the transfer of personal data to third countries unless personal data is protected by other means or an exception applies. For more information, check out our guide to international transfers.
For more information, visit the OIC website or by phone at ICO-Helpline on 0303 123 1113 (open Monday to Friday). Title VII (Articles 70-74) of the withdrawal agreement contains certain specific data protection provisions. These are also influenced by other provisions of the entire text of the agreement, including Article 127, which provides, among other things, that EU law (i.e. the RGPD) will be applicable in the United Kingdom during the transitional period. Unless the parties decide, before 1 July 2020, to extend the transitional period from 1 to 2 years, the whole of eu primary and secondary law will no longer apply in the United Kingdom from 1 January 2021.