GDPR: new data protection bill - statement of intent
170 "extremely useful" consultee responses lead to the conclusion that unhindered flow of data, therefore, is essential to the UK forging its own path as an ambitious trading partner.
That is why the government will be seeking to ensure that data flows between the UK and the EU, and also appropriately between the UK and third countries and international organisations, remain uninterrupted after the UK's exit from the EU.
The lessons from this?
1: respond to consultations and lobby- it seems to be necessary even on things that might seem obvious to your business (you cannot expect civil servants and politicians to understand your World unless you explain it to them in their language because they do not live in your World and many never have lived in it); and
2: don't stop - this is only a Bill and it has to go through what is now a very unpredictable legislative process; and
3: you and your IT director still need to have the budget and the plans in place to be compliant in your next financial year - however, on the upside, it is looking more likely that what you put in place for May 2018 may not need to be changed significantly 9 months later :-)