DataShield Chronicles

Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019: Navigating Post-Brexit Data Protection


Listen Later

This episode focuses on the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019, a critical regulatory update that adapts the UK’s data protection and privacy framework in light of Brexit. With the end of the transition period, this regulation was designed to ensure the continuity of data protection standards within the UK, while addressing key separations from the EU’s General Data Protection Regulation (GDPR). Topics covered include:

  1. Purpose of the 2019 Regulations
    We start with an introduction to the goals of this legislation, which are to secure a seamless transition of data protection and privacy laws post-Brexit. This includes maintaining GDPR-like standards within the UK, while incorporating specific amendments to reflect the country’s status outside of the EU.

  2. Key Changes and Amendments
    The regulation makes crucial amendments to GDPR and the UK’s Data Protection Act 2018. We explore the most significant changes, including terminological adjustments (e.g., replacing “EU” with “UK”) and provisions that ensure GDPR’s principles remain enforceable within the UK.

  3. UK GDPR and Domestic Framework
    A major focus is the establishment of “UK GDPR,” which essentially mirrors EU GDPR but functions independently within the UK. We discuss the implications of this split for businesses and data subjects, and how UK GDPR interplays with the retained portions of EU GDPR to create a uniquely UK-based data protection regime.

  4. International Data Transfers and Adequacy Decisions
    One of the most important areas for UK businesses is the handling of data transfers between the UK, the EU, and other international partners. This episode unpacks how the 2019 Regulations lay the groundwork for the UK to make its own adequacy decisions and establish data transfer protocols.

  5. Implications for Compliance and Enforcement
    The new regulation grants the Information Commissioner’s Office (ICO) specific powers to enforce data protection standards within the UK. We discuss how these powers align with, yet differ from, those previously held by EU regulatory bodies and what this means for compliance and accountability.

  6. Privacy and Electronic Communications Amendments
    In addition to data protection, the regulations address electronic communications by updating the Privacy and Electronic Communications Regulations (PECR) to work in tandem with UK GDPR. We examine the changes made to adapt electronic marketing rules to the UK’s independent framework.

  7. Impact on Businesses and Data Subjects
    Finally, we consider the effects of these amendments on UK businesses and residents, particularly focusing on compliance strategies, cross-border data exchange, and data protection rights.

  8. This episode provides a comprehensive guide to the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019, helping listeners understand the operational, legal, and compliance adjustments in a post-Brexit landscape.

    ...more
    View all episodesView all episodes
    Download on the App Store

    DataShield ChroniclesBy Akintunde Idowu