About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

Brexit and the UK Data Protection Bill: How does it impact you?

Subscribe to our newsletter

By Dennis Slattery, CEO at EDMworks

On September 13, the UK government introduced in Parliament the Data Protection Bill. Its purpose is to implement a comprehensive data privacy framework for the UK in the post-Brexit environment. The scope of the bill covers:

  • Implementing the General Data Protection Regulation (GDPR) into UK law
  • Implementing the EU Law Enforcement Directive (LED), which member states have until May 6, 2018 to transpose into national law
  • Adopting the standards on processing of personal data carried out by the intelligence services.

The bill is meant to function as a bridge between the existing UK approach to data protection under the 1998 Data Protection Act and the new framework created by the GDPR and the LED. In essence, the bill reinforces the UK’s position on data protection by replicating many of the provisions and safeguards contained in the 1998 Act.

These include processing of sensitive data around criminal convictions, automated decision-making safeguards and exemptions for processing under certain types of circumstances, for example, crime and taxation purposes, research, historical or statistical purposes. The age of a child for UK consent purposes is set at 13, as against 16 in the GDPR.

New criminal offences

The existing offence of unlawfully obtaining personal data is retained with the penalty of unlimited fines. Two new offences are created: (1) re-identification of personal data which is contained in an anonymised dataset; and (2) alteration of personal data to prevent disclosure in response to a data subject access request.

Watch out for the Brexit negotiations!

Transferring data across the EU boundary is tricky. The EU Commission controls a list of ‘3rd’ countries it deems as having ‘adequate levels’ of data protection. Only a few countries are listed: Andorra, Argentina, Canada (commercial organisations), Faeroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland and Uruguay. To transmit data to an entity in another country involves additional legal mechanisms such as the EU/US ‘Privacy Shield’ agreed between the US Department of Commerce and the EU Commission.

In simple terms, EU privacy law puts human rights at the core of data protection, while the US prioritises ‘national security’ ahead of personal privacy. ‘Privacy Shield’ tries to resolve this by providing a legal framework, but it is subject to constant (and successful) legal challenge, which generates uncertainty for everyone involved.

Arguably, the UK position on privacy lies somewhere between the EU and US positions. The status of post-Brexit cross border flows is one of the key items in the EU/UK Brexit negotiations. The outcome will determine whether the UK has 3rd country status, some ‘special’ status or no status at all.

Watch this space. This UK bill may not be the end of the story.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Detecting and preventing market abuse

Market abuse – unlawful disclosure of inside information, insider trading, circular trading, “pump and dump” schemes, etc. – poses significant threats to the integrity of capital markets. In 2024, global trading house Trafigura agreed to pay a $55 million fine to the U.S. Commodity Futures Trading Commission (CFTC) for trading with non-public information, manipulating a...

BLOG

AI, Cloud, Digital Assets, Cybersecurity – What to Expect at TradingTech Summit 2025

A-Team Group’s 14th Annual TradingTech Summit London is set to take place on 27th February 2025 at the Hilton Canary Wharf, bringing together industry leaders, innovators, and experts to explore the latest advancements in financial markets trading technology. Kicking Off the Conversation: Innovation, AI, and the Future of Trading Following the welcome address, Cathy Gibson,...

EVENT

Data Licensing Forum 2025

The Data Licensing Forum will explore industry trends, themes and specific developments relating to licensing of financial market data from Exchanges and Data Vendors.

GUIDE

AI in Capital Markets: Practical Insight for a Transforming Industry – Free Handbook

AI is no longer on the horizon – it’s embedded in the infrastructure of modern capital markets. But separating real impact from inflated promises requires a grounded, practical understanding. The AI in Capital Markets Handbook 2025 provides exactly that. Designed for data-driven professionals across the trade life-cycle, compliance, infrastructure, and strategy, this handbook goes beyond...