Its a sure-fire bet that no one who voted for Brexit<\/a> gave two thoughts about how the referendum result would affect their online information. But the risks are real \u2014 and wont just be felt by those in the U.K.<\/p>\n Without a new data deal, both British and European companies will find it hard to share even the most basic of information across the Channel \u2014 data that underpins trade reaching into the tens of billions of euros each year. (After Brexit, the U.K. loses the automatic right to participate in regionwide data-sharing, potentially leading to lengthy legal disputes in which London could be forced to unilaterally accept EU privacy standards and Brussels may demand greater safeguards from the British than currently exist.)<\/p>\n Officials and legal experts reckon it will take 12 to 18 months, at best, to hammer out an agreement.<\/p>\n<\/blockquote>\n Regulators and law enforcement agencies may similarly be hamstrung when trying to quickly share data about ongoing investigations, including terrorist threats and state-backed meddling in national elections.<\/p>\n The rest of us (no matter if youre in Madrid, Manchester or Milan) may also find it increasingly difficult to do even basic things online like sharing our data with companies inside and outside of the EU bloc if more roadblocks are created on the post-Brexit data superhighway.<\/p>\n \u201cA U.K.-EU data agreement is desirable, logical and ideal,\u201d said Eduardo Ustaran<\/a>, co-director of the global privacy and cybersecurity practice at Hogan Lovells, a law firm in London. \u201cBut if it doesnt happen, then companies will need to learn to survive.\u201d<\/p>\n The uncertainty about data transfers is a prime example of the law of unintended consequences<\/a> two years after the Brexit vote.<\/p>\n * * *<\/p>\n Its understandable why Brexit negotiators <\/strong>have yet to turn to data.<\/p>\n The EU wants big-ticket issues like the role of the European Court of Justice to be addressed first. That means even the U.K.s divorce settlement (and the thorny issues like how to avoid creating a hard border between Northern Ireland and the Republic of Ireland) remains in doubt<\/a> as the months tick down to Britain leaving the EU at the end of March 2019.<\/p>\n But the fact that London and Brussels are not yet discussing the complexities of a cross-border data agreement shows how hard it is to unpick a 45-year relationship that has woven the U.K. into the heart of EU policymaking.<\/p>\n It doesnt help that both sides cant even agree \u2014 insert your own Brexit joke here \u2014 on when to sit down.<\/p>\n British officials, many of whom remain relatively relaxed<\/a> about securing a data deal because London already complies with Europes tough privacy rules, are eager to start talks before the divorce settlement is completed, according to several people with direct knowledge of the matter who spoke on the condition of anonymity because of the sensitivity of the pending negotiations.<\/p>\n For London, the sooner talks get going, the more likely they are to secure as broad a data agreement as possible \u2014 a basic requirement if Britain is to maintain its prime spot as first among equals in Europes burgeoning tech scene<\/a>.<\/p>\n Such efforts have fallen on deaf ears in Brussels.<\/p>\n EU officials outright refuse to discuss data (or the litany of other industry-specific agreements that will be needed) until the U.K. signs off on its divorce agreement. London had originally aimed<\/a> for a complex data treaty with Brussels, but is now resigned to a so-called adequacy agreement, or a lesser deal that must be reviewed by the European Commission roughly every five years.<\/p>\n When Brits went to the polls in 2016, no one was thinking of how the referendum on leaving the EU would affect the U.K.s transformation into a fully digital society.<\/p>\n<\/blockquote>\n Time is running out.<\/p>\n Officials and legal experts reckon it will take 12 to 18 months, at best, to hammer out an agreement, including finding answers to tricky questions like how to impose limitations on British national security agencies access to EU data.<\/p>\n So even if discussions begin the day after Britain leaves the bloc (and thats a big if), theres little room for error before the U.K.s two-year transition ends in 2021. If no agreement is struck, officials may be forced to put together a temporary arrangement to keep digital information flowing, or face shutting down access for British firms.<\/p>\n That countdown is already forcing companies reliant on cross-border data (roughly three-quarters of U.K. international transfers are with other EU countries, according to government statistics<\/a>) to make tough decisions: Either jump ship from the U.K., at least in terms of where they are regulated for all things privacy, or ride their luck whenever negotiations finally get under way.<\/p>\n * * *<\/p>\n For those thinking this is just Project Fear<\/a><\/strong>, its worth remembering the EU has as much to lose as Britain if both sides part company over data in a post-Brexit world.<\/p>\n As part of the regions revamped data protection standards that came into force in May<\/a>, national privacy regulators were given wide-ranging powers to fine companies up to 4 percent of their global revenue, or \u20ac20 million, whichever is higher, if they flout the EU rules.<\/p>\n Such new regulatory muscle \u2014 particularly when handling complex international data issues like the recent Cambridge Analytica scandal<\/a> \u2014 inevitably requires collaboration between EU officials. And many still turn to the U.K. and its well-financed regulator, the Information Commissioners Office<\/a>, for guidance, expertise and resources. (The British regulator was the first agency worldwide<\/a> to fine Facebook for its role in the Cambridge Analytica case.)<\/p>\n Yet that close relationship is also in jeopardy after Brexit, something that will hurt cash-strapped EU regulators more than their well-resourced British counterparts.<\/p>\n Even before data talks get started, several regulators are resigned to the fact the ICO will lose its voting rights \u2014 and ability to help jointly investigate cross-border cases \u2014 as part of the pan-EU data protection group<\/a>, which oversees the Continents new regulatory regime.<\/p>\n A Cambridge Analytica sign at its office in London | Chris J Ratcliffe\/Getty Images<\/p>\n Sure, both British and EU officials say that everything is up for grabs in the upcoming data negotiations. They add that the British may still be able to participate in some fashion in the regionwide work, though its role will be severely diminished. (The ICO is estimated to provide roughly one-third of the legal heavy-lifting to the EU group, known as the European Data Protection Board, or EDPB.)<\/p>\n \u201cFull membership is very unlikely,\u201d said Richard Thomas<\/a>, former head of the British agency and current data protection chief for the British crown dependency of Guernsey. \u201cIf we end up in a situation where the ICO is excluded from the EDPB, that would be extremely unfortunate.\u201d<\/p>\n Extremely unfortunate, it may well be.<\/p>\n But with British and EU officials still squabbling over basic aspects of Brexit and far from addressing cross-border data transfers, the signs of securing a U.K.-EU deal in time dont look good.<\/p>\n When Brits went to the polls in 2016, no one was thinking of how the referendum on leaving the EU would affect the U.K.s transformation into a fully digital society.<\/p>\n Now that we are dealing with the complex reality, its hard to see how the pending divorce will benefit either side \u2014 at least in terms of data protection \u2014 when Britain finally goes its separate way.<\/p>\n Mark Scott is chief technology correspondent at <\/em>POLITICO.<\/p>\n Original Article<\/a><\/p>\n [contf] [contfnew] LONDON \u2014 The Irish border, citizens rights, a free-trade agr..<\/p>\n","protected":false},"author":1,"featured_media":89503,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[],"class_list":["post-89502","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"yoast_head":"\n\n
\n
![](\"https:\/\/www.politico.eu\/wp-content\/uploads\/2018\/05\/GettyImages-935591172-1-714x444.jpg\"\/)
<\/p>\nRead this next: Fear and loathing on the Swedish campaign trail<\/a><\/em><\/h2>\n
<\/p>\n
<\/a><\/h5>\n","protected":false},"excerpt":{"rendered":"