News for hackers. Stuff that matters.
Re:UK to depart from GDPR by that_guy_iain on Friday March 12, 2021 @05:11AM (#26434013)
As far as I understand it, it currently can't be hosted in the UK anyways. As the requirement is to store the data within the EU.
Re:UK to depart from GDPR by andy_ppp on Friday March 12, 2021 @05:17AM (#26434066)
If we were able to agree to those rules I'm sure we could strike a deal with the EU. This has always been the name of the game right - if you play by each set of rules and align the EU probably sees that as a net benefit and lets countries align, for eaxample Switzerland can still host EU personal data, from the article:

"Fortunately, Switzerland, along with 12 other non-EEA countries, has received an "adequacy decision" from the European Commission. An adequacy decision is a recognition of the strength of Switzerland's data protection law."

https://www.termsfeed.com/blog/gdpr-switzerland/

Re:UK to depart from GDPR by Blikkentrekker on Friday March 12, 2021 @05:16AM (#26434052)
I thought the data could be exported to any country whose laws offer the same level of protection.
Re:UK to depart from GDPR by theelous3 on Friday March 12, 2021 @05:19AM (#26434080)
You can store it wherever you want, so long as you're in compliance.
Re:UK to depart from GDPR by jeroenhd on Friday March 12, 2021 @05:30AM (#26434160)
> You can store it wherever you want, as long as you're in compliance.

From a GDPR standpoint, compliance means that the country where the data is stored has an agreement with the EU AND you must have enforceable and strong, negative consequences for the foreign party in your contract.

The EU can only make such an agreement for a foreign country if the data protection laws are sufficient. I do not know whether or not the UK laws are considered sufficient, but without any such agreement, you cannot assume that you can just store EU personal data in the UK.

With the death of Privacy Shield and its siblings, this first requirement isn't even the case for the US anymore as the US will not guarantee the safety of EU citizens' information from things like the patriot act. However, I haven't seen any country complain about storing data with Google, Amazon or Facebook yet so I don't think this rule will be enforced any time soon. Technically, though, storing PII in a foreign, non-EU country without the necessary requirements is still very much illegal with the full suite of fines available to the data processing agencies.

Re:UK to depart from GDPR by 02thoeva on Friday March 12, 2021 @05:36AM (#26434222)
There is a draft adequacy agreement between the two which should be signed before the end of June when the transition period ends: https://ec.europa.eu/commission/presscorner/detail/en/ip_21_...
Re:UK to depart from GDPR by romanovcode on Friday March 12, 2021 @09:40AM (#26436275)
This is not true. For example sensitive data for German company must be stored in Germany, not Ireland.
Re:UK to depart from GDPR by theelous3 on Friday March 12, 2021 @01:30PM (#26439082)
It is true. If this is the case for Germany, it is Germany's own doing and outside the scope of gdpr.