Insights Government publishes updated Guidance on using personal data in your business or other organisation


The Guidance covers the action that organisations need to take regarding data protection and data flows with the EU/EEA now that the transition period has ended. It is for UK businesses and organisations that: (i) receive and transfer personal data to/from organisations abroad; and/or (ii) operate in the EEA.

The Guidance covers:

  • receiving personal data from the EU/EEA and already adequate third countries, including the EU-UK Trade & Cooperation Agreement interim bridging mechanism for personal data;
  • personal data flows form the UK;
  • personal data provisions in the Withdrawal Agreement;
  • appointing EU-based representatives;
  • data protection and GDPR; and
  • “Schrems II”.

To access the Guidance, click here.