Question to the Department for Digital, Culture, Media & Sport:

To ask Her Majesty’s Government, given that data centres resident in the UK will no longer be subject to EU data protection rules following the UK's withdrawal from the EU, whether they will seek the UK's continued participation in the General Data Protection Regulation (EU) 2016/679 covering cross-border flows of personal data.

The General Data Protection Regulation will apply to EU member states from 25 May 2018. We fully expect still to be in the EU at that point, and so we will ensure that the General Data Protection Regulation will apply in the UK from then.

Thereafter, as part of plans for the UK’s exit from the EU, the Government is considering all the options on the most beneficial way of ensuring that the UK's data protection regime continues to build a culture of data confidence and trust, that safeguards citizen and supports business in the global economy.