An academic paper notes that, post-Brexit, there will be legal challenges if the EU Commission grants full adequacy for EU-UK data flows (the CJEU’s Schrems II decision requires the Commission to ensure UK data protection levels are essentially equivalent to the GDPR), and if SCCs and BCRs are implemented by UK companies (they cannot offer protection against foreign governments’ surveillance and intelligence-gathering activities).
#gdpr #privacy #emergingrisk