On 15 December, 2020 the European Data Protection Board issued an information note regarding personal data transfers between stakeholders subject to GDPR and UK entities which, as of 1 January 2021, will constitute a transfer of personal data to a third country.
In the absence of an adequacy decision applicable to the UK as per Article 45 GDPR, such transfers will
require appropriate safeguards(e.g., standard data protection clauses, binding corporate rules, codes
of conduct…), as well as enforceable data subject rights and effective legal remedies for data subjects,
in accordance with Article 46 GDPR.
The full text of the information note is available at this link.
