For the past few months, the U.K. has been locked in a bitter stalemate over its departure from the EU. And if England, Scotland, Wales and Northern Ireland leave the EU without a deal, companies could be faced with an extra regulator when handling continental Europeans’ data. Plus, any company that currently calls a U.K.-based agency a lead supervisory authority or Article 27 representative will have to find an EU replacement.
As a member of the EU, the U.K. has been part of the General Data Protection Regulation (GDPR)’s “one-shop-stop” mechanism that allowed one data protection authority to be the lead authority investigating and ruling on local GDPR violations. After the U.K. leaves the European Union, that will no longer be the case.
