GDPR extra-territoriality in a post-Brexit world

As UK and EU businesses grapple with the complexities of the post-Brexit world, one of the first key questions for businesses from a data privacy perspective is whether their processing is subject to the UK or EU regime (or both). We discuss in our briefing whether the High Court in the Soriano case sheds any light on the issue and what questions it leaves unresolved. 

A version of this briefing was first published in Privacy Laws & Business UK Report, Issue 114 (March 2021).