The House of Lords European Union Committee (the “committee”) has published a report titled “Brexit: the EU data protection package” (PDF) which looks at the upcoming changes to the EU’s data protection laws and the implications on data transfers between the UK and EU after the UK leaves the European Union.
The key points from the report include:
The report looks at the impact of Brexit on the following upcoming changes:
After Brexit, the UK will become a “third country” no longer bound by EU data protection laws and will not be part of the EU-US Privacy Shield or EU-US Umbrella Agreement. However, it is still important to consider the upcoming changes because the EU's rules on data transfers to third countries (i.e. the UK) require them to meet an "adequate" level of protection.
Proposed changes to the legal safeguards for exports of personal data from the UK have been laid before Parliament for approval, to come into force on 21 March 2022