0370 270 6000

already registered?

Please sign in with your existing account details.

need to register?

Register to access exclusive content, sign up to receive our updates and personalise your experience on brownejacobson.com.

Privacy statement - Terms and conditions

as Japan becomes 'adequate' for data protection laws...will the UK soon become 'inadequate'?

29 January 2019

On 23 January 2019, the European Commission and the Personal Information Commission of Japan, concluded a two-year-long dialogue and jointly announced the adoption of the decisions recognising each other’s personal data protection systems as ‘equivalent’.

This means that businesses all over the EEA (which includes the UK…at least for the next 8 weeks..) can easily transfer personal data to Japan in a ‘frictionless’ exchange, without the need for safeguards that would apply to non-EU countries.

It is likely to be hugely beneficial to Japan and the EU but begs another question for the UK – will the UK be 'adequate' after 29 March this year?

Will the UK meet the adequacy test?

Upon Brexit the UK will cease to be an EU Member State and become a so-called ‘third country’. This is a serious concern because transfers of personal data from the EU to third countries are severely restricted.

While the UK has announced it will adopt all current adequacy decisions of the EU upon exit, the EU will need to assess the UK’s privacy framework as equivalent and has given no similar assurances. Indeed there are indications that the UK may well be considered 'inadequate' meaning transfers from the EU to the UK would require safeguards in place at least until the UK obtains its own 'adequacy' decision (which typically takes two years).

What does this mean for you?

If you currently receive personal data from the EU (including from other parts of your own business) you may need to ensure that you have safeguards in place prior to Brexit, to make sure that flow of data can continue. We can help with these. We have written up a short blog on what to consider here.

Brexit and beyond: navigating the challenges ahead

Our Brexit hub provides useful information on the key areas that are likely to be affected by Brexit, the priority issues for any business or organisation and practical guidance to help you navigate the challenges ahead.

Visit the Brexit hub >

related opinions

Marriott International: a look behind the ICO’s £99m fine and what this means for corporate acquisitions

Last month, the Information Commissioner’s Office (ICO) announced notice of its intention to fine (NOI) Marriott International, Inc. £99m for infringements of the GDPR.

View blog

SFO fail to secure individual criminal convictions following Deferred Prosecution Agreement

On 16 July 2019 the Serious Fraud Office released details of the Deferred Prosecution Agreement reached with Sarclad Ltd in July 2016.

View blog

Supreme Court backs employers seeking to enforce restrictive covenants: Tillman v Egon Zehnder Ltd

The Supreme Court in Tillman v Egon Zehnder Ltd has determined that where post-termination restrictive covenants (i.e. “non-compete” clauses) in employment contracts go further than reasonably necessary to protect an employer’s business interests, it can apply the ‘blue pencil test,’ severing the offending words and leaving the remaining enforceable clause in place.

View blog

Watch this space on breach of contract, vicarious liability and assumption of responsibility

The concept of Assumption of Responsibility is on many stakeholders’ minds at the moment following the Supreme Court decision in CN & GN v Poole.

View blog

mailing list sign up



Select which mailings you would like to receive from us.

Sign up