Businesses risk non-compliance with the EU's General Data Protection Regulation (GDPR) if they transfer data from the EU to the UK after 29 March, in a no-deal Brexit scenario. Most GDPR cases are brought by individuals, and it remains to be seen whether anyone will file claims over what experts say is a procedural issue. The GDPR requires companies that process personal information of European citizens and residents to obtain consent before processing it. However, EU regulators are likely to be lenient if companies have not updated clauses in their contracts immediately after a no-deal Brexit. Furthermore, the majority of GDPR complaints are brought by individuals who may not consider this cause of non-compliance as serious as others.
Businesses risk non-compliance with the EU's General Data Protection Regulation (GDPR) if they transfer data from the EU to the UK after 29 March, in a no-deal Brexit scenario. The GDPR requires companies that process personal information of European citizens and residents to obtain consent before processing it. However, EU regulators are likely to be lenient if companies have not updated clauses in their contracts immediately after a no-deal Brexit. Furthermore, the majority of GDPR complaints are brought by individuals who may not consider this cause of non-compliance as serious as others.