The Direct Marketing Association (DMA) has urged companies to check what they will be required to do with user data in the event of a no-deal Brexit.
For data to move freely between the UK and EU, an adequacy agreement would be necessary. Such an agreement has been reached with many non-EU countries, but the UK would need time to negotiate and implement the new arrangement.
In the meantime, the flow of data between the UK and EU may grind “to a halt”. According to the BBC, companies storing data in both geographies may need an EU-approved standard contractual clause to continue operating.
The Information Commissioner has posted guidelines on its website on how to prepare for a no-deal Brexit. It says: “You should read this guidance if you are a business or organisation based in the UK and the GDPR currently applies to your processing of personal data.”
The guidelines span topics including international data transfers, the European Data Protection Board and NIS Regulations.
Having read the document in full, BBC technology correspondent Rory Cellan-Jones concluded: “(…) I can imagine lots of smaller companies will still be struggling to work out exactly what they need to do.
“But with just 71 days left to prepare for a no-deal Brexit, any business that depends on data had better get their skates on. Otherwise, they could see a vital resource stuck in an endless tailback at the border.”
The Online Dating Association has this week issued a reminder to brands that they should work hard to fulfill their obligations to consumers in the area of data privacy.
Read more here.