An Update – the Brexit Deal & its effect on your business data protection

08 January 2021

On Christmas Eve of 2020, the European Union and United Kingdom had a trade agreement agreed, in principle, in what is was a historic day for both. As part of the agreement we have dissected the contents of this and what it means to you and your business. This update will relate to the landscape and changes faced from a data protection perspective.

The next four months

As of 1 January 2021, the UK and EU have agreed to a further transition period in relation to the future of data protection. For an initial four month period, with potential for a further extension of two months, UK companies who are importing data or working as processors for EU clients will be allowed to continue trading as usual without having to put in place any additional safeguards, such as Standard Contractual Clauses and those discussed in our earlier blog.

Your Business & Data Protection post Transition Period

The logical question to be asking is therefore: what happens after this additional transition period? The purpose of this extended transition, in regards to data protection, is to allow the European Commission sufficient time to continue their assessment of adequacy of the UK’s data protection laws. At the end of this transition period there will therefore be two outcomes: one where the EU deems the UK to have adequate data protection laws, or where the EU does not believe the UK’s laws are adequate.

In the first scenario where the UK is deemed adequate then they this adequacy will act as the safeguard that allows for EU based entities to freely send their data to their UK based service providers. This would be a business-as-usual situation where no changes will need to be made to the operation of your business with your European clients.

However, where there is no adequacy determination, the UK will be treated as a ‘third country’ under the GDPR. In this instance there would be a prohibition on the transfer of personal data from the EU to the UK. The only way around this would be for both parties to ensure that adequate safeguards are in place.

As discussed in our previous blog these would usually be the incorporation of Standard Contractual Clauses or, in the case of larger continental organisations, the implementation of Binding Corporate Rules.

What should you do to be ready?

The takeaway from this is that you should be confident during the next 4 to 6 months when dealing with clients based in the EU. However, given that the transition period is short and there is no guarantee of an adequacy decision you should ensure that any contracts with EU clients have provisions to allow for changes, such as the incorporation of Standard Contractual Clauses on notice, where the UK is not deemed to be adequate after this transition period.

We can help with these changes and ensure that you can continue trading with Europe. Should you wish to discuss this or makes these changes then you can get in contact here: [email protected] or 01273 447 072.

Related Stories


Buying or selling a business –share purchase or asset purchase

Written by Alvin Ittoo, Head of Corporate As a team that specialises in assisting buyers and sellers of businesses, one of the most common questions we get relates to the difference between an asset and share sale or purchase. Both structures can help you achieve the objective of buying or selling…


Convention Celebration

The ACUMEN BUSINESS CONVENTION 2019 held its special tenth edition on May 8th with hundreds of decision makers from across the region. This year was absolutely packed with fantastic speakers, entertainment and excitement.


The Future is Now!

The 9th May saw the ACUMEN BUSINESS CONVENTION 2018 held at The Grand Hotel, Brighton bring wonder and insight to hundreds of delegates from far and wide …


A New Sister Firm!

With Spring in the air these are very exciting times for Acumen as March saw the launch of ACUMEN PEOPLE, the brand new sister firm of the award-winning business specialist law firm, ACUMEN BUSINESS LAW with offices in Hove and Gatwick …



The 1st February Academy session covered a plethora of practical and essential tips on preparing for the GDPR regulations and how to utilise this making it an opportunity in regards to your business data and your contacts …


A True Local Success

Checkatrade, the leading UK online directory, based in Selsey, has come under the ownership of the HomeServe Group with the final valuation close to £90m …


Insight into innovative businesses

Following our passion for business, innovation and changemakers in our pursuit to get to know some of these business leaders and share their story, we recently caught up with Platform …

Check us out on social