'Inadequacy' - an inevitable end to 2020?

In this article my colleagues, Rohan Massey, Abbey Shaw and I consider the likelihood of an adequacy decision being granted in respect of the UK by the European Commission confirming that the UK's legal framework and data protection regime are "essentially equivalent" to those established by the GDPR and provide adequate protection for individuals' personal data.

If no adequacy decision is granted prior to the end of the transition period - in other words, before 1 January 2021 - organisations transferring, or planning to transfer, personal data from the European Economic Area to the UK will be required to implement suitable cross-border transfer mechanisms to ensure that appropriate safeguards are in place which provide an adequate level of protection for personal data.

We consider various ways in which personal data transferred to the UK can be adequately protected, together with a number of recent European legal developments which may impact upon traditional transfer mechanisms.

The message is clear – in case Brexit reaches an inadequate conclusion, take steps now to avoid your business suffering the same fate!