---
description: What effect will Brexit have in the GDPR regulation once the UK leaves the EU in 2021? Read on to find out and how software can help with compliance.
image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress
title: GDPR after Brexit - what's next for SMEs on compliance?
---

# GDPR after Brexit – what’s next for SMEs?

Canonical: https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes

Published on 14/08/2020 | Written by Sonia Navarrete.

![GDPR after Brexit – what’s next for SMEs?](https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png)

> After the UK government’s withdrawal bill was passed following a great deal of difficulty in parliament, the future of Brexit was set. 

-----

## Article Content

After the UK government’s withdrawal bill was passed following a great deal of difficulty in parliament, the future of Brexit was set. This placed a deadline on the UK’s departure from the European Union on New Year’s Eve, 2020. Although – in theory – this deadline could be extended to ensure a future trading agreement between the EU and the UK is reached, the government has said it will not do so under any circumstances. GDPR after BrexitFor SMEs, this means that how they will trade with suppliers and customers in EU states is likely to change.In the field of data compliance, there are currency tools available to help businesses, like compliance software or even specific GDPR compliance software –  however, there are likely to be some changes, too. This is because SMEs have had to comply with GDPR (General Data Protection Regulations) which first came into force in May 2018. The UK had its own data management laws before GDPR. However, their introduction meant that every UK organisation handling customer records needed to take much more care over data protection. For example, which information was kept, how long it was held for and how it should be destroyed. Many SME owners and digital directors will know a great deal about GDPR already since it often meant a big change in data management when it first came in. Anything from cookie policies to the digital destruction of confidential customer records fell under its auspices.So, what will happen to GDPR after Brexit? Will it no longer apply to UK-based businesses or will it still have an impact? If so, will it matter to businesses only operating in the UK with no European trade or will only larger organisations need to pay attention to it? Read on to find out more about GDPR after Brexit and what you can do to plan for it before the new regime starts in January 2021.Why was GDPR introduced?Before progressing to GDPR after Brexit, it is worth noting exactly why GDPR came in and what it is for.  Some SMEs saw it as nothing more than a lot of additional administration that they could do without. However, the idea was to protect everybody, from individuals to small enterprises.Any data collected on you became accessible to you. Only files that were reasonable to keep could be stored and everyone in the EU gained the right to be ‘forgotten’; in other words, to have their digital records destroyed. By forcing organisations to keep their data more securely, it also meant hackers found it much more difficult to get hold of customer files – something that has undoubtedly led to SMEs taking more care with cybersecurity measures. In turn, this has helped them to maintain a better reputation for corporate governance than they otherwise would have.What does GDPR cover?Currently, GDPR covers all organisations in the ways they handle online storage, their websites and their business apps in compliance within a single legal framework. Compliance with GDPR after Brexit may, therefore, continue to be a case of best practice. UK-based businesses are still going to need to manage all of the data they keep on the public, customers and suppliers. At present UK companies currently bound by GDPR are also under the regulations enforced by UK law, specifically the Data Protection Act of 2018.  Indeed, this law already includes the ability to interpret its regulations in accordance with those of GDPR.As such, GDPR after Brexit is likely to apply even when the UK is no longer subject to any EU directives. Of course, the UK parliament may well repeal the Data Protection Act and replace it. That is a question for the government, however. For now, the initial interpretation of the law will be similar to the regulatory framework that businesses currently operate in.How should businesses act now?SMEs that are confident they are compliant with GDPR rules need to look to future changes by the UK legislature. This will mean differences between the UK and the EU start to occur. In the immediate future, however, there are no known government plans to alter the law. Of course, any breaches of GDPR rules will be subject to UK law in UK courts. Those businesses who sell services to EU citizens in Paris, Turin or Cologne will still need to be GDPR-compliant anyway. The EU treats businesses accessing their markets from places outside in just the same way.Those SMEs which need to know more about how they will comply with GDPR after Brexit as the UK departs the EU can get help with the right compliance software and GDPR compliance software. Such software tracks policies and procedures to ensure they are compliant with the regulations.  There are plenty of software packages and apps to choose from that are suited to SMEs. Effectively, they automate many of the processes needed under GDPR to help SMEs get on with their main business functions.Looking for Compliance Software? Check our catalogue

## About the author

### Sonia Navarrete

Sonia is a Senior Content Analyst at Capterra, helping SMEs choose the best software. She published in Raconteur, Computer Weekly and IT Pro. Journalist and PR. 

## Links

- [View on Capterra](https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes)
- [Blog](https://www.capterra.co.uk/blog)
- [Home](https://www.capterra.co.uk/)

-----

## Structured Data

<script type="application/ld+json">
  {"@context":"https://schema.org","@graph":[{"name":"Capterra UK","address":{"@type":"PostalAddress","addressLocality":"Egham","addressRegion":"ENG","postalCode":"TW20 9AH","streetAddress":"Tamesis, The Glanty, Staines-upon-Thames Egham TW20 9AH United Kingdom"},"description":"Capterra UK helps millions of people find the best business software. With software reviews, ratings, infographics, and the most comprehensive list of business software.","email":"info@capterra.co.uk","url":"https://www.capterra.co.uk/","logo":"https://dm-localsites-assets-prod.imgix.net/images/capterra/logo-a9b3b18653bd44e574e5108c22ab4d3c.svg","@type":"Organization","@id":"https://www.capterra.co.uk/#organization","parentOrganization":"Gartner, Inc.","sameAs":["https://twitter.com/Capterra","https://www.facebook.com/Capterra/","https://www.linkedin.com/company/capterra/","https://www.youtube.com/channel/UCEt7vQSPiPlPAblHdhJAqnA"]},{"name":"Capterra UK","url":"https://www.capterra.co.uk/","@type":"WebSite","@id":"https://www.capterra.co.uk/#website","publisher":{"@id":"https://www.capterra.co.uk/#organization"},"potentialAction":{"query":"required","target":"https://www.capterra.co.uk/search/?q={search_term_string}","@type":"SearchAction","query-input":"required name=search_term_string"}},{"name":"GDPR after Brexit - what&#39;s next for SMEs on compliance?","description":"What effect will Brexit have in the GDPR regulation once the UK leaves the EU in 2021? Read on to find out and how software can help with compliance.","url":"https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes","about":{"@id":"https://www.capterra.co.uk/#organization"},"@type":"WebPage","@id":"https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes#webpage","isPartOf":{"@id":"https://www.capterra.co.uk/#website"}},{"description":"After the UK government’s withdrawal bill was passed following a great deal of difficulty in parliament, the future of Brexit was set. ","author":[{"name":"Sonia Navarrete","@type":"Person"}],"image":{"url":"https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png","@type":"ImageObject","@id":"https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes#primaryimage"},"@type":"BlogPosting","articleBody":"&lt;p&gt;After the UK government’s withdrawal bill was passed following a great deal of difficulty in parliament, the future of Brexit was set. &lt;/p&gt;&lt;p&gt;This placed a deadline on the UK’s departure from the European Union on New Year’s Eve, 2020. Although – in theory – this deadline could be extended to ensure a future trading agreement between the EU and the UK is reached, the government has said it will not do so under any circumstances. &lt;/p&gt;&lt;img title=&quot;header_blog_v1&quot; alt=&quot;GDPR after Brexit&quot; class=&quot;aligncenter&quot; fetchpriority=&quot;high&quot; src=&quot;https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png&quot; srcset=&quot;https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png?w=400 400w, https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png?w=700 700w, https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png?w=1000 1000w, https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png?w=1500 1500w, https://images.ctfassets.net/63bmaubptoky/FSp7KqXEVEpk2nlehYWCgpWMMeEMLkxwAvsAd8rJF3E/7bb9f0622f14b7b648d1d6e5264ec6b7/header_blog_v1.png?w=2200 2200w&quot; sizes=&quot;(min-resolution: 2x) 2200px, (min-width: 992px) 1000px, 95vw&quot;/&gt;&lt;h2&gt;GDPR after Brexit&lt;/h2&gt;&lt;p&gt;For SMEs, this means that how they will trade with suppliers and customers in EU states is likely to change.&lt;/p&gt;&lt;p&gt;In the field of data compliance, there are currency tools available to help businesses, like &lt;a href=&quot;/directory/30110/compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;compliance software&lt;/a&gt; or even specific &lt;a href=&quot;/directory/31309/gdpr-compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;GDPR compliance software&lt;/a&gt; –  however, there are likely to be some changes, too. &lt;/p&gt;&lt;p&gt;This is because SMEs have &lt;a href=&quot;/blog/840/gdpr-turns-one-is-your-sme-compliant&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;had to comply with GDPR&lt;/a&gt; (General Data Protection Regulations) which first came into force in May 2018. &lt;/p&gt;&lt;p&gt;The UK had its own data management laws before GDPR. However, their introduction meant that every UK organisation handling customer records needed to take much more care over data protection. For example, which information was kept, how long it was held for and how it should be destroyed. &lt;/p&gt;&lt;p&gt;Many SME owners and digital directors will know a great deal about GDPR already since it often meant a big change in data management when it first came in. Anything from cookie policies to the digital destruction of confidential customer records fell under its auspices.&lt;/p&gt;&lt;p&gt;So, what will happen to GDPR after Brexit? Will it no longer apply to UK-based businesses or will it still have an impact? If so, will it matter to businesses only operating in the UK with no European trade or will only larger organisations need to pay attention to it?&lt;/p&gt;&lt;p&gt; Read on to find out more about GDPR after Brexit and what you can do to plan for it before the new regime starts in January 2021.&lt;/p&gt;&lt;h2&gt;Why was GDPR introduced?&lt;/h2&gt;&lt;p&gt;Before progressing to GDPR after Brexit, it is worth noting exactly why GDPR came in and what it is for.  Some SMEs saw it as nothing more than a lot of additional administration that they could do without. However, the idea was to protect everybody, from individuals to small enterprises.&lt;/p&gt;&lt;p&gt;Any data collected on you became accessible to you. Only files that were reasonable to keep could be stored and everyone in the EU gained the right to be ‘forgotten’; in other words, to have their digital records destroyed. &lt;/p&gt;&lt;p&gt;By forcing organisations to keep their data more securely, it also meant hackers found it much more difficult to get hold of customer files – something that has undoubtedly led to SMEs taking more care with &lt;a href=&quot;/directory/31037/cybersecurity/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;cybersecurity measures&lt;/a&gt;. In turn, this has helped them to maintain a better reputation for corporate governance than they otherwise would have.&lt;/p&gt;&lt;h2&gt;What does GDPR cover?&lt;/h2&gt;&lt;p&gt;Currently, GDPR covers all organisations in the ways they handle online storage, their websites and their business apps in compliance within a single legal framework. &lt;/p&gt;&lt;p&gt;Compliance with GDPR after Brexit may, therefore, continue to be a case of best practice. UK-based businesses are still going to need to manage all of the data they keep on the public, customers and suppliers. &lt;/p&gt;&lt;p&gt;At present UK companies currently bound by GDPR are also under the regulations enforced by UK law, specifically &lt;a href=&quot;https://www.gov.uk/data-protection#:~:text=The%20Data%20Protection%20Act%202018%20is%20the%20UK&amp;#39;s%20implementation%20of,used%20fairly%2C%20lawfully%20and%20transparently&quot; rel=&quot;nofollow noopener noreferrer&quot; target=&quot;_blank&quot;&gt;the Data Protection Act of 2018&lt;/a&gt;. &lt;/p&gt;&lt;p&gt; Indeed, this law already includes the ability to interpret its regulations in accordance with those of GDPR.&lt;/p&gt;&lt;p&gt;As such, GDPR after Brexit is &lt;a href=&quot;https://www.euronews.com/2020/06/24/britain-must-abide-by-european-data-protection-rules-after-brexit-ec-says&quot; rel=&quot;noopener noreferrer nofollow&quot; target=&quot;_blank&quot;&gt;likely to apply&lt;/a&gt; even when the UK is no longer subject to any EU directives. Of course, the UK parliament may well repeal the Data Protection Act and replace it. That is a question for the government, however. &lt;/p&gt;&lt;p&gt;For now, the initial interpretation of the law will be similar to the regulatory framework that businesses currently operate in.&lt;/p&gt;&lt;h2&gt;How should businesses act now?&lt;/h2&gt;&lt;p&gt;SMEs that are confident they are compliant with GDPR rules need to look to future changes by the UK legislature. This will mean differences between the UK and the EU start to occur. &lt;/p&gt;&lt;p&gt;In the immediate future, however, there are no known government plans to alter the law. Of course, any breaches of GDPR rules will be subject to UK law in UK courts.&lt;/p&gt;&lt;p&gt; Those businesses who sell services to EU citizens in Paris, Turin or Cologne will still need to be GDPR-compliant anyway. The EU treats businesses accessing their markets from places outside in just the same way.&lt;/p&gt;&lt;p&gt;Those SMEs which need to know more about how they will comply with GDPR after Brexit as the UK departs the EU can get help with the right &lt;a href=&quot;/directory/30110/compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;compliance software&lt;/a&gt; and &lt;a href=&quot;https://www.capterra.co.uk/directory/31309/gdpr-compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;GDPR compliance software&lt;/a&gt;. &lt;/p&gt;&lt;p&gt;Such software tracks policies and procedures to ensure they are compliant with the regulations.  &lt;/p&gt;&lt;p&gt;There are plenty of &lt;a href=&quot;/directory/30110/compliance/software&quot; rel=&quot;noopener noreferrer&quot; target=&quot;_blank&quot;&gt;software packages and apps to choose from&lt;/a&gt; that are suited to SMEs. Effectively, they automate many of the processes needed under GDPR to help SMEs get on with their main business functions.&lt;/p&gt;&lt;div class=&quot;box-idea&quot;&gt;Looking for Compliance Software? Check our &lt;a href=&quot;/directory/30110/compliance/software&quot; rel=&quot;noopener noreferrer&quot; class=&quot;evnt&quot; data-evac=&quot;ua_click&quot; data-evca=&quot;Blog_idea&quot; data-evna=&quot;engagement_blog_product_category_click&quot; target=&quot;_blank&quot;&gt;catalogue&lt;/a&gt;&lt;/div&gt;&lt;p&gt;&lt;/p&gt;","dateModified":"2023-11-06T14:21:15.000000Z","datePublished":"2020-08-14T05:00:56.000000Z","headline":"GDPR after Brexit – what’s next for SMEs?","inLanguage":"en-GB","mainEntityOfPage":"https://www.capterra.co.uk/blog/1677/gdpr-after-brexit-whats-next-for-smes#webpage","publisher":{"@id":"https://www.capterra.co.uk/#organization"}}]}
</script>
