3 ms·

Do GPDR rules even apply in Britain any longer given that it's split from the EU is 100% now?

vinay427 4y ago
As far as I can tell, yes. It was implemented in the UK (as in EU countries) by incorporating it into national law, but can be reviewed at a later date as some UK politicians have claimed to support. https://ico.org.uk/for-organisations/dp-at-the-end-of-the-transition-period/data-protection-and-the-eu-in-detail/the-uk-gdpr/ https://ico.org.uk/for-organisations/dp-at-the-end-of-the-tr...
- M2Ys4U 4y ago
  >It was implemented in the UK (as in EU countries) by incorporating it into national law That's not how it worked. The GDPR is a regulation which means that it applies as-is in all EU member states without being incorporated in to national laws. It is only directives that need to be incorporated in to national law (a process known as "transposition"). As far as the UK goes, because the GDPR was in force at the time of Brexit it continued to apply (the same with almost all EU law), although it was amended so that it didn't reference EU institutions any more (like removing the bits that talked about the EDPB or collaboration with other EU supervisory authorities, replacing references to the Commission with the Secretary of State and other things like that).
  - vinay427 4y ago
    I believe you're mostly right, so I stand corrected; apologies for the error. However, the Data Protection Act 2018 [1] does complement and supplement the GDPR in UK national law, including certain data not covered by GDPR, and more specifically apparently "implements those parts of the GDPR which 'are to be determined by Member State law'". This was before Brexit took place, and it was later amended to reflect non-EU status at the start of 2021. [1] https://en.wikipedia.org/wiki/Data_Protection_Act_2018 https://en.wikipedia.org/wiki/Data_Protection_Act_2018
M2Ys4U 4y ago
Yes, almost all EU law that was in force at the time of exit was kept (and is known as "retained EU law"), with necessary modifications. For the GDPR specifically, the UK basically forked it and has what's known as the "UK GDPR". They basically just gave the powers that lie with the Commission to the Secretary of State and deleted the bits that dealt with cross-border collaboration between DPAs.

As far as I can tell, yes. It was implemented in the UK (as in EU countries) by incorporating it into national law, but can be reviewed at a later date as some UK politicians have claimed to support. https://ico.org.uk/for-organisations/dp-at-the-end-of-the-transition-period/data-protection-and-the-eu-in-detail/the-uk-gdpr/ https://ico.org.uk/for-organisations/dp-at-the-end-of-the-tr...

M2Ys4U 4y ago
>It was implemented in the UK (as in EU countries) by incorporating it into national law That's not how it worked. The GDPR is a regulation which means that it applies as-is in all EU member states without being incorporated in to national laws. It is only directives that need to be incorporated in to national law (a process known as "transposition"). As far as the UK goes, because the GDPR was in force at the time of Brexit it continued to apply (the same with almost all EU law), although it was amended so that it didn't reference EU institutions any more (like removing the bits that talked about the EDPB or collaboration with other EU supervisory authorities, replacing references to the Commission with the Secretary of State and other things like that).
- vinay427 4y ago
  I believe you're mostly right, so I stand corrected; apologies for the error. However, the Data Protection Act 2018 [1] does complement and supplement the GDPR in UK national law, including certain data not covered by GDPR, and more specifically apparently "implements those parts of the GDPR which 'are to be determined by Member State law'". This was before Brexit took place, and it was later amended to reflect non-EU status at the start of 2021. [1] https://en.wikipedia.org/wiki/Data_Protection_Act_2018 https://en.wikipedia.org/wiki/Data_Protection_Act_2018

M2Ys4U 4y ago

Yes, almost all EU law that was in force at the time of exit was kept (and is known as "retained EU law"), with necessary modifications. For the GDPR specifically, the UK basically forked it and has what's known as the "UK GDPR". They basically just gave the powers that lie with the Commission to the Secretary of State and deleted the bits that dealt with cross-border collaboration between DPAs.