3 ms·
This is correct. Current legislation (GDPR and the UK's implementation in the 2018 Data Protection Act) does not require data to be stored in the UK. G Suite is
by twoslide 6y ago
This is correct. Current legislation (GDPR and the UK's implementation in the 2018 Data Protection Act) does not require data to be stored in the UK. G Suite is definitely GDPR compliant, could the trustee be raising vague concerns without good cause (they do that). There are other reasons to switch from Google, but that's not one of them.
- johnchristopher 6y agoIs the UK still bound to the GDPR though (considering Brexit) ?
- DanBC 6y agoYes. GDPR is the EU regulation, but member countries incorporated it into their domestic legislation. In the UK that's the Data Protection Act 2018. To remove GDPR from the UK we'd have to change the data protection act.
- number6 6y agoDo you know if the Brexit would invalidate the act? I am not an expert on UK Law but I also wondered if it is possible that the reference on the GDPR would still be valid
- AndrewDucker 6y agoAt that point the UK could revoke or change the law. But it wouldn't automatically vanish.
- DanBC 6y agoNo, brexit will not invalidate the act. It's now UK law.
- number6 6y agoThanks for the clarification; most EU countries just made some kind of diff to the GDPR and did not make it an explicit law
- pbhjpbhj 6y agoRegulations are laws that directly apply across EU, unlike directives (which bind member states to make a law that achieves the goals of the directive). https://en.wikipedia.org/wiki/Regulation_(European_Union)#Description https://en.wikipedia.org/wiki/Regulation_(European_Union)#De... So you can make legislation around a Regulation but can't override its effects.
- number6 6y agoAt least till the end of the year. They have an act that states the GDPR as applicable in the UK. Not sure if this will hold after the Brexit but could as well be.
- desas 6y agoYes it was copied and pasted into UK law (along with local tweaks) as the Data Protection Act 2018.
- ericyan 6y agoThe Data Protection Act 2018 enacts the EU GDPR requirements in UK law, which will become the UK GDPR after 31 December 2020. So, technically no, but in practice, yes.
- pbhjpbhj 6y agoAIUI Chapter V requires that, eg deletion, needs to be achievable under a binding and enforceable contract when data is outside the EEA. Is that possible with companies in USA? How?