EU data transfers: UK legislates ‘transitional’ measures for post-transition period
Minister claims both general and law-enforcement data will be able to flow regardless of outcome of adequacy decision
Credit: Geert Vanden Wijngaert/AP/Press Association Images
The government has legislated for “transitional” measures to ensure that – following the end of the Brexit transition period on 31 December – data can continue to be legally transferred between the UK and the rest of Europe.
With less than three months until the conclusion of the transition period, the EU has yet to grant the UK the “data adequacy” status that would allow information to continue flow freely between this country and the remaining 27 member states.
There is no clarity on when such a decision might be made, nor if the UK will, ultimately, be granted adequacy status.
The government has faced an increasing volume of questions as to what is being done to ensure that, for both businesses and public authorities, data can continue to be transferred across borders.
Minister for media and data John Whittingdale said that the government is “seeking adequacy decisions from the EU, under both the General Data Protection Regulation and the Law Enforcement Directive, before the end of the transition period”.
“This process is moving forward and talks between the UK and EU have been underway since 11 March,” he added. “The EU’s adequacy assessment is separate from other UK-EU negotiations.”
Regardless of the outcome of this process, Whittingdale claimed that the government has put legislative measures in place to make sure that – in the near-term – information can continue to be transferred by both businesses and law-enforcement authorities.
“To continue the free flow of data from the UK to the EU, we have legislated so that personal data for general processing can continue to flow freely, on a transitional basis, from the UK to the 30 EEA (European Economic Area) states and the EU Institutions after the end of the transition period,” the minister said. “We have also ensured that personal data for law enforcement purposes can flow freely, on a transitional basis, to the 27 EU member states to support cross-border cooperation in preventing crime.”
He added: “We will keep these arrangements under review and will, in any event, conduct adequacy reviews within four years of them coming into effect – i.e. by 1 January 2025 – as required by our law.”
Whittingdale was answering a written parliamentary question from Sarah Olney, Liberal Democrat MP for Richmond Park.
As government’s online infrastructure becomes more sophisticated, digital agency says there is ‘less of a case’ for organisations to use alternative platforms
Airline slapped with record penalty by ICO – albeit one that is grossly reduced on the regulator’s original intention
The nation's expertise in online services and transformation could help forge connections with other countries, according to Tanya Filer from Cambridge University and Antonio Weiss of The PSC
Watchdog makes 139 recommendations after identifying numerous lapses