• Current students
      • Student centre
        Enrol on a course/exam
        My enrolments
        Exam results
        Mock exams
      • Course information
        Students FAQs
        Student induction
        Course enrolment information
        Key dates
        Book distribution
        Timetables
        FAE Elective Information
      • Exams
        Exam Info: CAP1
        E-assessment information
        Exam info: CAP2
        Exam info: FAE
        Reasonable accommodation and extenuating circumstances
        Timetables for exams & interim assessments
        Interim assessments past papers & E-Assessment mock solutions
        Main examination past papers
        Information and appeals scheme
        JIEB: NI Insolvency Qualification
      • CA Diary resources
        Mentors: Getting started on the CA Diary
        CA Diary for Flexible Route FAQs
      • Admission to membership
        Joining as a reciprocal member
        Conferring dates
        Admissions FAQs
      • Support & services
        Recruitment to and transferring of training contracts
        CASSI
        Student supports and wellbeing
        Learning Hub data privacy policy
        Online Payment FAQs
        Audit qualification
    • Students

      View all the services available for students of the Institute

      Read More
  • Becoming a student
      • About Chartered Accountancy
        The Chartered difference
        What do Chartered Accountants do?
        5 Reasons to become a Chartered Accountant
        Student benefits
        School Bootcamp
        Third Level Hub
        Study in Northern Ireland
        Events
        Blogs
        Member testimonials 2021
        Become a Chartered Accountant podcast series
      • Entry routes
        College
        Working
        Accounting Technicians
        School leavers
        Member of another body
        International student
        Flexible Route
        Training Contract
      • Course description
        CAP1
        CAP2
        FAE
        Our education offering
      • Apply
        How to apply
        Exemptions guide
        Fees & payment options
        External students
      • Training vacancies
        Training vacancies search
        Training firms list
        Large training firms
        Milkround
        Training firms update details
        Recruitment to and transferring of training contract
        Interview preparation and advice
        The rewards on qualification
        Tailoring your CV for each application
        Securing a trainee Chartered Accountant role
      • Support & services
        Becoming a student FAQs
        Who to contact for employers
        Register for a school visit
    • Becoming a
      student

      Study with us

      Read More
  • Members
      • Members Hub
        My account
        Member subscriptions
        Annual returns
        Application forms
        CPD/events
        Member services A-Z
        District societies
        Professional Standards
        Young Professionals
        Careers development
      • Members in practice
        Going into practice
        Managing your practice FAQs
        Practice compliance FAQs
        Toolkits and resources
        Audit FAQs
        Other client services
        Practice Consulting services
        What's new
      • Overseas members
        Working abroad
        Working in Australia
        Overseas members news
        Tax for returning Irish members
      • In business
        Networking and special interest groups
        Articles
      • Public sector
        Public sector news
        Public sector presentations
      • Support & services
        Letters of good standing form
        Member FAQs
        AML confidential disclosure form
        CHARIOT/Institute Technical content
        TaxSource Total
        Audit Qualification requirements
        Pocket diaries
        Thrive Hub
    • Members

      View member services

      Read More
  • Employers
      • Training organisations
        Authorise to train
        Training in business
        Manage my students
        Incentive Scheme
        Recruitment to and transferring of training contracts
        Securing and retaining the best talent
        Tips on writing a job specification
      • Training
        In-house training
        Training tickets
      • Recruitment services
        Hire a qualified Chartered Accountant
        Hire a trainee student
      • Non executive directors recruitment service
      • Support & services
        Hire members: log a job vacancy
        Firm/employers FAQs
        Training ticket FAQs
        Authorisations
        Hire a room
        Who to contact for employers
    • Employers

      Services to support your business

      Read More
☰
  • Find a firm
  • Jobs
  • Login
☰
  • Home
  • Knowledge centre
  • Professional development
  • About us
  • Shop
  • News
Search
View Cart 0 Item

News

  • Home/
  • News
☰
  • News
  • News archive
    • 2020
    • 2019
  • Press releases
    • 2022
    • 2021
    • 2020
  • Newsletters
  • Press contacts
  • Media downloads
  • Podcasts Chartered Accountants Ireland
  • Budget day news

Cross-Border flow of Data

Jan 03, 2021

Cross-border data flows enable trade. Many businesses rely on the ability to transfer personal data about their customers or employees in order to offer goods and services.  Any restriction on the ability of data to flow freely would act as a trade barrier. What measures are in place to ensure personal data can be transferred safely across borders next year?

The UK has stated that regardless of the Brexit negotiations outcome, a Standard Contractual Clause will need to be put in place to ensure data can flow freely from the EU/EEA to the UK from 1 January 2021. This is separate from a trade deal with the EU and will have to be done in any scenario.

At the time of writing, the EU has yet to make a decision on whether to accept that the UK’s data protection regime is adequate to enable the status quo to apply (more on this below).  

Why is the ability to exchange data so important?

Cross-border data flows enable trade. Many businesses rely on the ability to transfer personal data about their customers or employees in order to offer goods and services or even to run cloud-based email or file-storage systems. 

Any restriction on the ability of data to flow freely would act as a trade barrier.

What is data protection law?

Data protection law covers situations where information about somebody (“personal data”) is used by another person or organisation, other than in a purely personal context.  Legislation regulates the ways and circumstances in which personal data might be processed.

The General Data Protection Regulation (GDPR) is the legislation which applies to most kinds of processing of personal data (other than in a personal context), across the EEA (the EU plus Iceland, Norway, and Liechtenstein). GDPR means that data controllers within the EU are not allowed to transfer personal data outside of the EU/EEA unless the high standards that apply under GDPR are maintained.

What is personal data?

Personal data covers things like name, date of birth, email address, address, phone number, location data or physical characteristics. It doesn’t have to be in written form. It can include photos, audio or video recordings that are processed electronically or as part of a filing system.

Processing data means using personal data in any way, such as collecting, storing, retrieving, consulting and disclosing.

What type of data is transferred between the EU and UK?

To assess if you are transferring personal data between the UK and EU (i.e., cross-border) consider the following:

  • Are you outsourcing your HR, IT or payroll function to a cross-border organisation?
  • Are you using a cross-border server or a server in the cloud to store personal data?
  • Are you using software (such as for email or databases) provided by a cross-border company which may involve transferring personal data to a cross-border server?
  • Are you using a cross-border marketing company to send communications to your customers?
  • Is your pension scheme based cross-border?

What will happen after Brexit?

During the transition period, the EU will continue to treat the UK as if it were a Member State and data can continue to flow between the UK and the EU/EEA.  When the transition period ends, the UK will not automatically benefit from this free flow of data.

When preparing for a possible no-deal exit, the UK committed to retain GDPR legislation in domestic law at the end of the transition period but will have the independence to keep the framework under review.  This means that the UK government will automatically recognise the EU as adequate for data transfers. Outbound transfers of data from the UK to the EU/EEA will not therefore be restricted as long as UK data protection rules are followed.  

The EU have not reciprocated at the time of writing, however, and will treat the UK as a third country until an adequacy decision is made. To ensure data flows continue after Brexit, the UK would therefore need to secure an adequacy decision from the European Commission.  In the meantime, appropriate safeguards are needed for data transferring into the UK from the EU/EEA.

What is an ‘adequacy decision’?

The European Commission may grant an ‘adequacy decision’ to allow cross-border transfers of personal data from the EU/EEA to the UK because the UK has been found to have an adequate level of data protection safeguards when compared to the EU.  This means that once the UK has been awarded an adequacy status, information can pass freely between the UK and the EU/EEA without further safeguards being required.

What happens if a decision on adequacy is not reached by 31 December 2020?

The transition period will end with no arrangements to ensure adequate levels of data protection in place. Therefore, the UK will be treated as any other ‘third country’ (any country outside the EU/EEA) without an adequacy decision.  This means that the UK and EU/EEA will exchange data based on their individual international transfers rules (e.g., standard contractual clauses). At the moment, the UK and EU/EEA both have similar rules based on the GDPR, but this might change in time.

For Irish companies transferring data to the UK

If a party in the EU/EEA sends personal data to someone who is outside of the EU/EEA (including the UK), they must comply with GDPR rules on international transfers of personal data. Therefore, specific safeguards will need to be put in place to ensure adequate protection for data. The most common of these mechanisms is ‘standard contractual clauses’ and the UK government have confirmed this position.

Standard Contractual Clauses

The standard contractual clauses (SCC) are a set of standard contractual terms and conditions to which the data controller and recipient or data processor both sign up. Both sides give contractually binding commitments to protect personal data in the context of the transfer from the EU/EEA to a third country.

For example, this can be done by putting in place a new/stand-alone contract between an Irish- based controller and a UK based recipient.

More information

The Data Protection Commission in Ireland has set out the following guidance on data and Brexit:

Know your data – Brexit and Data Protection

Transfers of Personal Data from Ireland to the UK in the event of a no-deal Brexit

For UK companies transferring data to the EU/EEA

There are currently no changes to the way personal data is transferred from the UK to the EU/EEA.  

Gov.uk has further guidance. The Information Commissioner’s Office in the UK has set out some further guidance. The HMRC  has also released data-related guidance.  

The latest news to your inbox

Useful links

  • Current students
  • Becoming a student
  • Knowledge centre
  • Shop
  • District societies

Get in touch

Dublin HQ

Chartered Accountants
House, 47-49 Pearse St,
Dublin 2, D02 YN40, Ireland

TEL: +353 1 637 7200
Belfast HQ

The Linenhall
32-38 Linenhall Street, Belfast,
Antrim, BT2 8BG, United Kingdom

TEL: +44 28 9043 5840

Connect with us

Something wrong?

Is the website not looking right/working right for you?
Browser support
CAW Footer Logo-min
GAA Footer Logo-min
CCAB-I Footer Logo-min
ABN_Logo-min

© Copyright Chartered Accountants Ireland 2020. All Rights Reserved.

☰
  • Terms & conditions
  • Privacy statement
  • Event privacy notice
  • Sitemap
LOADING...

Please wait while the page loads.