Update on Brexit
On the 31 January 2020, the UK’s withdrawal agreement from the EU came into force. There has not been any agreement about data privacy equivalency between the UK and the EU.
This means that the UK will be looked upon as a third country GDPR wise. However, a transfer of personal data to a third country may take place where the Commission has decided that the third country ensures an adequate level of protection.
In June 2021 the Commission decided that the UK ensures an adequate level of protection for personal data transferred from the European Union to the UK meaning that data can flow freely from the union to the UK.
See here for more info.
The decision will expire on 27 June 2025 unless extended by the Commission.
Note that the decision will mean no changes to your rights under GDPR, hereunder the level of privacy protection.