GDPR and the UK after BREXIT
On 28 June 2021, the European Commission adopted a GDPR adequacy decision confirming that the UK provides an adequate level of protection for personal data transferred from the EU/EEA to the UK. Following a review of the UK’s data protection framework, the European Commission renewed the UK’s adequacy status on 19 December 2025. The renewed adequacy decision remains in force until 27 December 2031, subject to ongoing monitoring by the European Commission.
As a result of the UK’s adequacy status, personal data may be transferred from the EU/EEA to the UK without the need for Standard Contractual Clauses (SCCs) or other additional transfer safeguards under Chapter V of the EU GDPR.
This means that the way KQH ensures compliance with GDPR continues to be effective for all EU data.
What is GDPR?
- The General Data Protection Regulation came into force on May 25th 2018
- It is the legal framework for dealing with personal data of EU residents
- All those who process personal data of EU residents are required to demonstrate that they comply with GDPR
- As we deal with data as part of our business, particularly health data (sensitive) and sometimes patients (vulnerable) it is especially important for KQH to understand and comply fully with GDPR
Key Points
- GDPR applies regardless of which country you are based in – Anyone who is collecting, storing and processing the personal data of EU residents is required to comply
- The definition of personal data is wide – anything that contributes or links to identifying an individual is included
- Risk based accountability – Contracts, Privacy Notices, Risk Assessment and Record Keeping must comply
- Powerful individual rights – including the Right of Access, To Be Forgotten and Data Portability. We promote these rights to the individuals on whom we hold data
How KQH ensures compliance
- Annual full audits of our data processing
- Privacy by design and default is embedded into all our projects
- Data Protection Officer whose role is to ensure data protection compliance
- All directors and staff trained on GDPR
- Registered with the ICO
Privacy Notice for those helping KeyQuest Health with market research
Click here to download KQH’s Privacy Notice for HCPs and Patients helping us with Market Research
Links to more information on GDPR
Our Professional Bodies provide additional guidance on how best to ensure compliance in Healthcare Market Research
KeyQuest Health
Your Global Qualitative Fieldwork Team
