Companies risk non - compliance with the EU 's General Data Protection Regulation ( 2016 ) if they transfer data from the EU to the UK after 1 March , in a no - deal Brexit deal . Non - compliance with GDPR can lead to a fine of up to 4 % of global annual revenue , or € 20 m ( $ 22.6 m ) , whichever is higher . However , EU regulators are likely to be lenient if companies have not updated clauses in their contracts immediately after a no - deal Brexit . Furthermore , the majority of GDPR complaints are brought by individuals who may not consider this cause of non - compliance as serious as others .
Businesses risk non-compliance with the EU's General Data Protection Regulation (GDPR) if they transfer data from the EU to the UK after 29 March, in a no-deal Brexit scenario. Non-compliance with GDPR can lead to a fine of up to 4% of global annual revenue, or €20m ($22.6m), whichever is higher. However, EU regulators are likely to be lenient if companies have not updated clauses in their contracts immediately after a no-deal Brexit. Furthermore, the majority of GDPR complaints are brought by individuals who may not consider this cause of non-compliance as serious as others.