Data Protection

Following the UK’s exit from the EU, there are potentially now two sets of data protection regulations that you will need to comply with in addition to complying with the Data Protection Act 2018. They are the EU GDPR and the version of the GDPR retained in UK law following its departure from the EU (often referred to as the UK GDPR). The UK GDPR is derived substantially from the EU GDPR and, in general, the terms and core concepts of the UK GDPR have the same meaning as they do in the EU GDPR. However, there are a number of key differences between the two regimes.

Obtaining proper, tailored advice on compliance with the Data Protection Act 2018 and both the UK GDPR and, where relevant, the EU GDPR is crucial for your business. Our specialist business law solicitors have a real understanding of the legislative framework around data protection and are able to advise businesses on compliance with the same. We will work closely with your business to understand the data you process and how it is processed (by you and by third parties) to provide specific, bespoke advice to your business on current compliance and on any future needs.

Whilst the EU GDPR applies to the European Economic Area (EEA), of which the UK is no longer part, the EU GDPR can also still apply to UK-based businesses where data of any resident of an EEA country is processed. If your business is based in the UK, we can advise you on whether your business is affected by the EU GDPR and, if so, the extent of your compliance obligations. We are also able to advise international businesses on compliance, both with UK data protection laws and with the EU GDPR.