Is Brexit the End of GDPR?

21 Jan, 2021

I’m sure we all remember the countdown to 25th May 2018… GDPR day.  But now the Brexit transition period has ended, was it all a waste of our time?

Just to recap, the General Data Protection Regulations (GDPR) replaced the old 1998 Data Protection Act and which was brought in to ensure consistency to data security law by all EU members.  Failure to comply could result in hefty fines from the Information Commissioner’s Office (ICO).

So, if it was a law for EU members, and we’ve left the EU, is this even relevant anymore? The short answer is yes.

Whilst the EU GDPR no longer applies to the UK it has been incorporated into UK data protection law as the UK GDPR.  Therefore, if you operate inside the UK little has changed to core data principles, rights and obligations.

Discussions are ongoing between the EU Data Privacy Board and the UK ICO on how data can continue to transfer to and from the UK and EU members. The UK is applying for an ‘adequacy’ decision. If successful, this will mean that personal data can be transferred without additional safeguards being required. In the meantime, the UK Government has agreed as part of the exit process that data can continue to transfer without restrictions.

For those organisations who operate in Europe, the EU GDPR will still apply directly to you and any data received from organisations within Europe will need to be in line with the UK GDPR.  Find out more here.

The ICO will remain the independent supervisory body regarding the UK’s data protection legislation, and will continue to work closely with the European supervisory authorities.

The ICO have a wealth of information available to organisations to include webinars, FAQs and guidance notes which can be found here.

While these discussions continue to take please, for most organisations, the most important task is to ensure you know what data you are collecting and why, where you are storing it, how long it is being kept with, who has access and who are you sharing it with.

How can ISO 27001 help with GDPR?

The ISO 27001 is the internationally recognised Information Security Management System which provides a great starting point for meeting the technical and organisational requirements of the UK GDPR to keep data safe.  Find out more here.

ISO Quality Services Ltd are proud to specialise in the implementation and certification of the Internationally recognised ISO and BS EN Management Standards.

Do you want to get ahead of your competition? Win more tenders or save time and money on reoccurring issues? Contact us today on 0330 058 5551 or email info@isoqsltd.com.

Alternatively, you can request a quote by filling out our enquiry form and a member of our team will be in touch shortly.

Related Posts

Further Business Support Announced in 2021 Budget

3 Mar, 2021

Find out the latest business support announced by Chancellor Rishi Sunak in the 2021 Budget.

Reduce, Reuse, Recycle

Simple Ways to Reduce the Environmental Impact of Your Business

3 Mar, 2021

Being eco-friendly is still high on many businesses’ agendas.  Not a day goes by without reminders in the news about the damaging effect that we are all having on the planet.  However, many businesses struggle to know exactly what they can do in practical terms to reduce their impact.  Here we set out some key ideas for you to consider both now and for the ‘new normal’, post covid.

Our View: First Fence Limited

26 Feb, 2021

Find out what Senior Lead Assessor, Colin Watkins and Client Care Team Leader, Lauren Kebby had to say about First Fence Limited

10 Cyber Security Tips for Remote Working

23 Feb, 2021

Since the first lockdown, cyber security has been on the rise but why? Quite simply because remote working employees are easy targets and businesses are finding it difficult to manage everyone. So, what can organisations do to protect their cyber security?