See the government`s guidelines on the use of personal data after Brexit We believe that the transfer of data from the UK to the EU and Gibraltar can continue for now on the basis of new UK adequacy rules. For more information on how transmission rules work, see our guide to prosecutions. The government has said the transfer of data from the UK to the European Economic Area (EEA) will not be restricted. However, from the end of the transitional period, the GDPR dissemination rules will apply to all data from the EEA in the United Kingdom, unless the European Commission decides on adequacy. You need to think about what GDPR security measures you can take to ensure that data can continue to flow in the UK. In accordance with the Withdrawal Agreement, references to UNION law should generally be considered as the law applicable on the last day of the transitional period. As the period before the end of the transitional period has ended, you must act now to maintain the legal flow of personal data If you have branches in other EU Member States and you have designated the ICO as your Managing Supervisory Authority (LSA) under the Consistency Mechanism (Chapter VII, section 2), you should consider designating an EU regulatory authority other than your LSA for EU personal data. Your LSA must be selected in accordance with the requirements of the GDPR.