On 29 March 2019, the UK will formally leave the EU unless an extension, or a negotiated solution, is agreed between the UK and the European Commission. There is currently no agreement regarding the UK's status from a data protection perspective and crucially, no agreement concerning transfers of personal data from the EU to the UK. In the absence of an agreement on these issues, or in the event of a "no deal" Brexit, the UK will be considered a "third country". This will create additional compliance challenges for organisations.

To assist organisations in responding to the additional data protection compliance challenges after Brexit, White & Case has put together a No Deal Action Plan. This will be updated should an agreement be reached on the data protection issues.