Hacker News Reader

Comment by twoslide | Hacker News Reader

This is correct. Current legislation (GDPR and the UK's implementation in the 2018 Data Protection Act) does not require data to be stored in the UK. G Suite is definitely GDPR compliant, could the trustee be raising vague concerns without good cause (they do that). There are other reasons to switch from Google, but that's not one of them.

View on HN

AIUI Chapter V requires that, eg deletion, needs to be achievable under a binding and enforceable contract when data is outside the EEA.

Is that possible with companies in USA? How?

Is the UK still bound to the GDPR though (considering Brexit) ?

Yes. GDPR is the EU regulation, but member countries incorporated it into their domestic legislation. In the UK that's the Data Protection Act 2018.

To remove GDPR from the UK we'd have to change the data protection act.

Do you know if the Brexit would invalidate the act?

I am not an expert on UK Law but I also wondered if it is possible that the reference on the GDPR would still be valid

At that point the UK could revoke or change the law. But it wouldn't automatically vanish.

No, brexit will not invalidate the act. It's now UK law.

Thanks for the clarification; most EU countries just made some kind of diff to the GDPR and did not make it an explicit law

Regulations are laws that directly apply across EU, unlike directives (which bind member states to make a law that achieves the goals of the directive).

https://en.wikipedia.org/wiki/Regulation_(European_Union)#De...

So you can make legislation around a Regulation but can't override its effects.

At least till the end of the year. They have an act that states the GDPR as applicable in the UK. Not sure if this will hold after the Brexit but could as well be.

Yes it was copied and pasted into UK law (along with local tweaks) as the Data Protection Act 2018.

The Data Protection Act 2018 enacts the EU GDPR requirements in UK law, which will become the UK GDPR after 31 December 2020. So, technically no, but in practice, yes.

Reply on news.ycombinator.com