The data regulator has reiterated previous advice on how to maintain data flows with Europe after Brexit, but has updated this guidance to be more relevant for smaller businesses.

It has urged all businesses to read the guidance to check whether they need to take any action.

In the case of a ‘no-deal’ Brexit, any UK organisations that receive personal data from contacts in the European Economic Area (EEA) must take extra steps to ensure their data transfers are lawful.

Information commissioner Elizabeth Denham said: “It’s crucial that organisations make sure they properly prepare for all scenarios. If your organisation sends or receives personal information to countries in the EU, this guidance will help you work out whether you need to take steps now, what you need to do to prepare, and then let you get back to running your business.

Even if you think your organisation doesn’t transfer data internationally, I’d urge you to read what we’ve produced, and assess whether you need to act.”