The UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Rules for sharing data with countries outside the EEA will remain similar. At this stage, you don’t need to take any extra steps.

  • The UK government has confirmed that there are transitional provisions to recognise existing EU adequacy decisions and EU-approved transfers safeguards.
  • The UK is committed to maintaining the high standards of the GDPR and the government has incorporated it into UK law (the UK GDPR) alongside the Data Protection Act 2018.
  • Take stock so that you can identify overseas data acquired before the end of the transition period (known as ‘legacy data’). Data processed before 01 January 2021 will be subject to the EU GDPR as it stood on 31 December 2020 (known as the ‘frozen GDPR’).
  • Make sure you review your privacy information and documentation to identify any minor changes that need to be made now the transition period has ended.
  • Keep everyone up to date with the latest information and guidance.
  • For more information, see our detailed guidance on data protection at the end of the transition period.