ICO issues guidance in the event of a 'no-deal' Brexit
With additional measure likely to be placed upon the flow of data from the EEA, the UK's regulator urges businesses to be ready


The Information Commissioner's Office has urged businesses to "prepare for all scenarios" with the on-going Brexit negotiations.
The UK's data watchdog has published a guidance sheet to help "small to medium sized organisations" should the country leave the EU without a deal.
The guidance is similar to previously published documents on maintaining data flows, but it has been tweaked to be more relevant and accessible to smaller organisations.
The Commissioner, Elizabeth Denham, said it was crucial that organisations make sure they "properly prepare for all scenarios" regarding Brexit.
"If your organisation sends or receives personal information to countries in the EU, our guidance will help you work out whether you need to take steps now, what you need to do to prepare, and then let you get back to running your business," she said.
"Even if you think your organisation doesn't transfer data internationally, I'd urge you to read what we've produced and assess whether you need to act."
Data flows between the EU member states and the UK is increasingly vital for business supply chains and governments. The sharing of customer, citizen and employee data helps many organisations function and also plays a big role in the delivery of public services.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Currently, personal data flow is unrestricted because the UK is still a member of the European Union. However, with a 'no deal' scenario a big possibility, the EU law will require additional measures to be put in place when personal data is transferred from the European Economic Area (EEA) to the UK, in order to make them lawful.
In the ICO's guidance, companies are advised to use pre-approved contract terms, along with a number of other steps, if they wish to continue to transfer data to and from the EEA.
"It is in everyone's interests that appropriate exchanges of personal data continue whatever the outcome of Brexit," Denham said in a blog post. "The ICO will carry on co-operating internationally to ensure protections are in place for personal data and organisations have the right advice and guidance."
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Dragging your feet on Windows 11 migration? Rising infostealer threats might change that
News With the clock ticking down to the Windows 10 end of life deadline in October, organizations are dragging their feet on Windows 11 migration – and leaving their devices vulnerable as a result.
By Emma Woollacott
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard
-
ICO admits it's too slow dealing with complaints – so it's eying up automation to cut staff workloads
News The UK's data protection authority has apologized for being slow to respond to data protection complaints, saying it's been overwhelmed by increased workloads.
By Emma Woollacott
-
“Limited resources” scupper ICO probe into EasyJet breach
News The decision to drop the probe has been described as “deeply concerning” by security practitioners
By Ross Kelly
-
Surge in workplace monitoring prompts new ICO guidelines on employee privacy
News Detailed guidance on how to implement workplace monitoring could prevent data protection blunders
By Ross Kelly
-
TikTok could be hit with £27m fine for failing to protect children's privacy
News Social media firm issued with a notice from the ICO for potential violations of UK data protection laws
By Bobby Hellard
-
What is AdTech and why is it at the heart of a regulation storm?
In-depth The UK data regulator has come under heavy fire for consistently delaying much-needed action, privacy groups say
By Carly Page
-
ICO crackdown on AI recruitment part of three-year vision to save businesses £100 million
News ICO25 outlines a fresh approach that involves releasing learning materials, advice, and a new ICO-moderated discussion forum for businesses
By Connor Jones
-
Clearview AI fined £7.5m over improper use of UK data
News Australian facial recognition firm collected 20 billion images from the internet without consent in order to build its database
By Bobby Hellard
-
UK data watchdog cut IT spending by £1.2 million during pandemic
News The ICO’s IT budget has been slashed by around 23% since 2019
By Sabina Weston