INDUSTRY WATCH
After all , it wasn ’ t long ago that the European Data Protection Board ( EDPB ) voiced concerns revolving around the UK ’ s ability to potentially make changes to its data protection laws in the future , especially concerning other nations outside of the EU . This means that in theory , over time , the UK could diverge from the EU GDPR if it doesn ’ t agree with new rules or regulations .
Divergence has its pros and cons : on the one hand , it could mean simpler , more streamlined rules for the UK to follow in the future ; on the other hand , if the UK deviates too far from the original GDPR guidelines , the EU may decide the UK is ‘ non-adequate ’ and restrict the free flow of personal data . The potentially disruptive
WHEN THE GENERAL DATA PROTECTION REGULATION ( GDPR ) CAME INTO EFFECT ACROSS THE EU MEMBER STATES ON MAY 25 , 2018 , IT WAS THE MOST AMBITIOUS PIECE OF DATA REGULATION EVER PASSED BY THE EUROPEAN UNION . effect this could have on a significant number of British businesses cannot be overlooked .
The challenge ahead
It ’ s important to understand that adequacy is not set in stone and it can be revoked at any time , especially if the UK takes too many liberties in reinterpreting and redefining guidelines when it comes to international transfers of data . As a result , the UK needs to pull off a delicate balancing act in the years ahead .
However , it ’ s looking like it won ’ t be met without resistance from some quarters within the UK government . The Taskforce on Innovation , Growth and Regulatory Reform ( TIGRR ), has been particularly vocal about GDPR ’ s position on data collection , which needs to be for specified , explicit and legitimate purposes , as well as adequate , relevant and limited to what is necessary . TIGRR ’ s view is that these restrictions could prove detrimental to the growth of AI , as they limit companies in what they ’ re able to achieve with limited access to new data . It ’ s likely this won ’ t be the last disagreement between the two blocs .
These differences of opinion will likely cause concern to UK companies that depend on being able to access EU personal data . For this reason , it ’ s in the best interest of business owners to maintain a close watch on developments between the UK and EU in the months ahead when it comes to the management of data . Adequacy may have been achieved for now , but as we ’ ve established , its long-term status is all but guaranteed . p
76 INTELLIGENTCIO EUROPE www . intelligentcio . com