Data protection & Brexit

[pseudomonas]

If the UK and EU stop respecting each other as being regimes that automatically have appropriate data protection measures, are there any special-cases that kick in for the NI/ROI case to ensure that companies on one side of the border can continue to process the data of their clients on the other side?

Comments

[djm4]

I'm not a lawyer, although I am a DPO with a reasonable knowledge of data protection law. There is nothing to directly prohibit companies from countries without an adequacy agreement from processing the data of EU residents, but they do need to demonstrate that they have appropriate legal protections in place. There are other complications if the company is based entirely outside the EU. But it's not impossible and in the case of the NI/ROI border, I suspect that anyone currently complying with GDPR will need to do minimal work to continue to be fine after a hard Brexit.

We are in 'no-one knows for sure' territory, though.