Start Brexit contingency planning for continued personal data transfers
22 January 2019

High levels of uncertainty on whether or not there will be a Brexit deal and, if so, what the arrangements will be when the UK withdraws from the EU, pose significant challenges for our sector which is heavily dependent on free flows of data with European and international partners.

By acting now you can ensure that personal data flows between you and your clients and suppliers in the European Economic Area (EEA) will continue on 30 March, regardless as to what happens with the Brexit Withdrawal Agreement. Given the fast pace of the changing scenario you need to put practical tools in place to mitigate issues that might arise in the case of a no-deal scenario:

• Identify where your clients and/or research suppliers are located;
• Examine the personal data flows focusing on data flows between you and clients and/or suppliers in the EEA; and
• Take immediate steps to put in place Standard Contractual Clauses (SCC’s) with these clients and suppliers. 

Our EU-UK data transfers provides detailed guidance to help you comply with the requirements of the General Data Protection Regulation (GDPR) on personal data transfers.  Reading this along with our Standard Contractual Clauses Guideprovides you with practical guidance on what you need to do to adopt SCC’s, which are the most effective short term solution for continued data flows.  

If you would like to discuss these issues get in touch with our Codeline team codeline@mrs.org.uk who are here to help.

Continue to check our MRS Brexit Hub which contains the latest news, position statements and general advice for members.

Personal Data Breaches: Are you prepared?

We’ve published two new guides on our MRS GDPR In Brief Series. Our Guidance Note and Checklist on personal data breaches set out tips to help researchers  understand the  new  requirements  so that you can recognise and efficiently deal with personal data breaches.

Guides available here (with Member login)