Inadequate approach to data adequacy
I shudder to think what GB's new data protection legislation will look like based on previous form, particularly the 'oven ready' Brexit deal with the NI Protocol signed in what can only be described as bad faith and the finger of blame now pointed at the EU rather than the UK government.
Any substantive divergence from current (EU aligned) GDPR carries the risk of organisations having to continue to comply with EU legislation if they want to do business with organisations and individuals in the EU.
Having then to comply with two sets of requirements means more rather than less red tape for UK businesses.
A new industry will spring up helping businesses to be able to demonstrate compliance with EU legislation and validate an organisation's data protection adequacy.
Plus the UK is no longer part of the club that makes the rules, but is still subjected to them. This was crystal clear from the beginning of this sorry process.
Biting the hand that feeds IT
