Dealing With UK Privacy Compliance After Brexit: “Carry On”

For now, UK-U.S.data-transfer relations continue to be bound by the UK Data Protection Act of 1998. In the future the UK may well decide to remain a member of the European Economic Area, which would to a large extent subject it to EU regulation. This eventuality would mean application of the so-called General Data Protection Regulation (GDPR) to data transfer protocols, as planned before the Brexit vote. “For US companies with transatlantic operations, the best course is to continue a measured but deliberate approach towards eventual GDPR compliance,” writes Daniel L. Farris from the Polsinelli law firm.