European Commission releases notice to stakeholders on Brexit referencing data protection
The European Commission's Directorate-General for Justice and Consumers has issued a "Notice to stakeholders: withdrawal of the United Kingdom and EU rules in the field of data protection." The notice states the U.K. will soon "become a 'third country,'" meaning "all stakeholders processing personal data are reminded of legal repercussions, which need to be considered when the United Kingdom becomes a third country." The Commission points out that all rules for the transfer of personal data to a third country will apply to the U.K., meaning outside of an adequacy decision, safeguards for appropriate transfer of personal data may be provided for through model clauses, binding corporate rules, approved codes of conduct, approved certification mechanisms, or so-called "derogations." The notice also points out that preparing "for the withdrawal is not just a matter for EU and national authorities but also for private parties." To help, the Commission has created a stakeholder group that includes industry, civil society and academia to discuss the issue.