September 23, 2019

The ICO has urged businesses to “prepare for all scenarios”, as it publishes dedicated guidance to help small and medium sized organisations prepare for the possibility that the UK leaves the European Union without a deal.

The guidance provides the same advice previously published on how to maintain data flows, but has been produced to be more relevant and accessible to smaller organisations.

The ICO notes that sharing of customers’, citizens’ and employees’ personal data between EU member states and the UK is “vital for business supply chains to function and public authorities to deliver effective public services”. It explains that in the event of “no deal”, EU law will require additional measures to be put in place when personal data is transferred from the European Economic Area (EEA) to the UK in order to make them lawful.

The ICO’s guidance sets out steps to take to keep the information flowing such as using pre-approved contract terms, which are currently used to transfer personal information worldwide. To access the guidance, click here.