What effect will Brexit have on the application of the General Data Protection Regulation to the UK?

The application of the GDPR in the UK will not be affected by Brexit.

The GDPR applies across all EU member states. Following the UK's departure from the EU on 31 January 2020, a transition period is now in place and EU law continues to apply to the UK. The GDPR will be incorporated into UK law by the European Union (Withdrawal) Act 2018 on 31 December 2020, when the transition period ends.

The Data Protection Act 2018 supplements the GDPR.

Further, the GDPR will continue to apply directly to:

  • organisations established in the EU (for example international organisations with an EU presence); and
  • organisations established outside of the EU, but that process personal data of individuals in the EU in relation to offering goods or services, or monitoring the behaviour of individuals in the EU.