If the UK leaves the EU without a deal then it's likely that we'll become a "third country" under EU data protection laws. This means that, despite having implemented the GDPR, the UK will no longer be deemed to offer adequate protection of European personal data.
If you import personal data from the EEA then you should ensure that you have Standard Contractual Clauses in place with the exporter before the end of the transition period. If you won't be keeping an establishment in the EU, then you may also need to appoint a local representative.
For insight into what Brexit may mean for your business, visit our dedicated Brexit page here or Brexit LinkedIn page for all of our latest updates and you can also follow our Brexit tweets at #WMBrexit.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.