Summary This second instalment of our Brexit & Data Digest outlines the main sources of data protection law in the UK following the end of the Brexit transition period, and how the EU GDPR may continue to have relevance for companies located in the UK. With the UK now unambiguously outside of the EU, the EU General Data Protection Regulation (2016/679) is no longer directly part of the UK’s body of legislation. This is the second instalment of our Data & Brexit Digest, highlighting some practical data protection implications of Brexit, the end of the transition period, and the adoption of the EU-UK Trade and Cooperation Agreement (the