To ask the Secretary of State for Digital, Culture, Media and Sport, what assessment he has made of the potential effect of the Free Trade Agreement with Japan on (a) data protection standards and (b) data flows for UK data.
19 November 2020
The UK–Japan Comprehensive Economic Partnership Agreement (CEPA) is the UK’s first major trade deal as an independent trading nation.
CEPA seeks to remove unjustified barriers to data flows to strengthen trade between our two countries. It requires both parties to maintain comprehensive legal frameworks that protect personal information.
CEPA does not alter the UK’s existing data protection framework, enshrined in the Data Protection Act 2018 and GDPR. Under CEPA, the UK may adopt measures restricting data flows to achieve a legitimate public policy objective, including personal data protection and the ability to maintain an independent international data transfers regime. From the end of the transition period, the UK will preserve the effect of the EU's adequacy decision for Japan on a transitional basis, that will continue to provide robust protections for the international transfer of personal data.