How Privacy and Data Protection will look after Brexit?

Brexit has caused information chaos around privacy and data protection regulations in UK.
We clarify some popular misconceptions with simple examples.

UK’s government and companies will need to comply with European privacy and data protection laws, regardless of being a member of European Union.

  • UK needs to comply with GDPR. Organisations and companies will need to comply with General Data Protection Regulation if they process data of European Union's citizens. Fees for non-compliance are very high - they can reach even 4% of total global revenue.
  • Major points about GDPR
  • UK needs to comply with Council of Europe conventions. CoE's Convention for the Protection of Individuals with Regard to the Processing of Personal Data envisions strengthening the protection of personal data. The EU Referendum vote does not affect the UK's membership of the Council of Europe, or its obligations under CoE Conventions.
  • Major points about CoE's Convention
  • UK needs to comply with other data protection regulations, specific for market sectors. UK will be required to follow EU’s lead in security and privacy of certain special cases, in particular Internet of Things. Otherwise, access to the market will be complex, UK will need to show adequate protections.
  • Major points about IoT regulation
About this page