19 December: update on Brexit and data protection

With UK parliament set to vote on the draft agreement on Britain’s withdrawal from the European Union in the week of 14 January, we'd like to reassure local organisations that in the event of a 'no deal' Brexit in March 2019 consideration is being given to the need to invoke the statutory provision in our local Law to continue to recognise the UK as an adequate country from a data protection perspective.

This means that organisations could continue to transfer personal data to/from the UK as they do now. We can also confirm that on 17 December we met with the States of Guernsey's data protection policy team to discuss the situation, to ensure readiness to respond with a firm approach in the event of any Brexit scenario. And we will continue to work in partnership with the States as things evolve over the coming weeks.

• If you would like to know more about how UK organisations are affected, you can read the UK government's guidance, and the UK ICO's advice for organisations.
• For an in-depth look please refer to our deputy commissioner's paper: ‘Leaving the EU: the data protection implications of a Hard Brexit for UK businesses with EU data flows and clients' (May 2018 document)