The Brexit Deal agreed between the UK and EU contains a bridging mechanism that allows the continued free flow of personal data from the EU/EEA to the UK for up to six months, until data adequacy decisions come into effect.
The Government has indicated that it is likely that the UK will be granted data adequacy status by the EU within the six-month period. However, as a precaution to ensure that personal data can flow freely from the EU/EEA to the UK from 1 July 2021 uninterrupted, businesses could incorporate Standard Contractual Clauses (SCC) in their contracts with their EU partners as an alternative transfer mechanism.
Personal data is any information that can be used to identify a person – including names, delivery details, IP addresses, or HR data such as payroll data. For example, a UK company that receives customer information from an EU company, such as names and addresses, to provide goods or services, should have SCCs in place.
The Information Commissioner’s Office (ICO) has a hub of detailed guidance as to what actions to take to prepare for the end of the transition period here.
Further information from Government can be found here.