EU data server:Impact of data storage location if there the UK leaves the EU without a deal

  • Profile Image
    Goodwyn
    Asked on September 18, 2019 at 08:08 AM

    As a school we use Jotform to streamline the way we get information from parents. (It works very well, thank you).

    Being UK based we have just received guidance from the Department for Education (DfE) which advises that, "If the UK leaves the EU without a deal, the UK will not have in place an Adequacy Agreement for processing personal data and will be classed as a third party under GDPR. There is therefore a chance that a narrow interpretation of the provisions in GDPR could lead to a regulator in an EU country restricting the transfers of UK personal data in the EEA.

    It is important, therefore, that schools review their current data protection contracts and policies before 31 October, as they will need to ensure that they have the correct Standard Contractual Clauses (SCC) or other Alternative Transfer Mechanisms to continue to legally receive and process personal data from the EEA. If schools do not complete this action, they may be unable to access personal date stored in the EEA that they require to operate and may find that organisational partners restrict relationships due to regulatory concerns."

    Would you please be able to advise me what contingencies you have in place for a no deal Brexit on 31st October, particularly around where data is stored.

    Many thanks

    Iain

  • Profile Image
    JohnRex
    Answered on September 18, 2019 at 09:36 AM

    Hi @Goodwyn,

    Actually, we haven't received official advice regarding that matter yet.

    But let me elevate this thread to our second level so we could ask for their insights.

    We'll let you know on this thread as soon as updates are available.