After a turbulent few months, the Privacy Shield was re-approved by the EU Commission at the end of last year and with Brexit looming, if you are a Privacy Shield participant there are some steps you may need to take before 30th March 2019 to ensure you can continue to receive personal data from the UK.
I say ‘may need to take’ because it all depends on whether the Brexit Withdrawal Agreement is approved by the UK Parliament. If approved, there is an 18 month transitional period so Privacy Shield commitments will not need to be updated until 31 December 2020.
However, if the Agreement is not approved then Privacy Shield commitments will need to be updated by 30th March 2019 so it is advisable to start to look at this now.
So what do you need to do?
Update publicly facing privacy policies to specifically state that Privacy Shield Commitments extend to personal data received from the UK.If transferring HR data then the HR Privacy Policy will also need to be updated.Maintain your certification by completing an annual re-certification.
If you are a UK business that deals with a Privacy Shield Certified business then you should make sure that steps are being taken to make the relevant changes in time.
If you need help with this or any of the other regulatory compliance changes that are happening this year then don’t hesitate to ask Teal.
