Skip to content
PromoVeritas
PromoVeritas
Contact Us
PromoVeritas
  • Home
  • About Us
  • What We Do and Why
  • Our Work
  • News
  • Join the Team
  • Contact

Brexit Marketing 2021: UK marketers face conflicting jurisdictions for campaigns

Abi Roman December 31, 2020

UK marketers face conflicting jurisdictions when running sales, price and prize promotions in 2021, warns Ardi Kolah, data privacy law and marketing expert.

The UK and the EU managed to agree a Brexit Trade Deal just before the transition period ran out at 11pm on Thursday 31 December 2020.

But that doesn’t mean things won’t change when it comes to pan-European sales, price, and prize promotion campaigns. From Friday 1 January 2021, UK brand owners and promoters will now be subject to parallel legal regimes.

Under the Withdrawal Agreement, EU data protection law (now to be called ‘EU GDPR’) has been fully converted into UK domestic law (to be called ‘UK GDPR’) with some minor technical amendments to ensure it’s operable in the UK. So although it is in effect still the full GDPR, the Europe specific elements, such as the role of the European Data Protection Board, the EU Council, the Court of Justice of the European Union, the One Stop Shop mechanism and other measures rooted in European laws and customs have been stripped out as the transition arrangements have now come to an end.

Don’t panic – marketers don’t really need to do anything different and in any event, must continue to comply with the Data Protection Act 2018 that’s part of ‘UK GDPR’.

It’s now important that any UK company that transfers the personal data of EU customers and prospects puts in place alternative transfer mechanisms to comply with European data protection rules. And for most brand owners and promoters, this will entail adopting Standard Contractual Clauses (SCCs) for cross-border data transfers. Even if the personal data of EU entrants and consumers was collected prior to 2021, it now needs to be processed based on the Withdrawal Agreement 2020.

The Brexit Trade Deal is short on details as to exactly how data protection legal frameworks will develop in the UK and the EU. However, what we do know is this:

  • The Brexit Trade deal reaffirms the sovereignty of UK.
  • The EU and the UK have the right to achieve legitimate policy objectives, including privacy and data protection. Such provisions are autonomous under international law. In the UK, there’s no legal obligation to follow EU laws and the European Court of Justice (ECJ) now has no role to play in UK law.
  • The EU and UK are committed to ensuring cross-border data flows to facilitate trade in the digital economy and therefore will not require localisation of data storage or processing.
  • The EU and UK recognise that individuals have a right to the protection of personal data and privacy and that high standards in this regard contribute to trust in the digital economy and to the development of trade.
  • Both the EU and the UK have the right to adopt or modify laws and policies in a manner consistent with each party’s international obligations.
  • There is an interim provision for the transmission of personal data from EU to the UK to continue, although the UK can’t exercise designated powers to change parts of “UK GDPR” and our laws will still need to be considered for ‘adequacy’ by the European Commission after which the interim provision will lapse.
  • The EU and UK will review these provisions within three years of this Agreement entering into force.

So what should marketers and promoters do now?

These Top Ten Tips have been developed in association with PromoVeritas, the UK’s leading promotional compliance agency:

  1. Don’t put your pan-European promotional plans on ‘ice’ as you’ll miss out on the huge sales opportunities that exist within the EU! Remember that promotions continue to be some of the most effective marketing campaigns for brand owners in driving incremental sales of products and services in the UK and across Europe.
  2. Brexit may have changed the legal framework for data privacy and data protection, but legal protections haven’t been relaxed. If anything, marketers need to work harder and should seek professional guidance and advice when not sure what to do.
  3. Given the electronic nature of many cross-border sales, price and prize promotions, it’s important marketers continue to comply with the requirements of the Privacy and Electronic Communications Regulations (PECR).
  4. The UK’s laws on data privacy and data protection are changing and marketers must keep on top of this. Make a point of regularly visiting the ICO, ASA, Ofcom, PSA and DMA websites throughout 2021 for the latest guidance and best practice in this area of marketing practice. Also check out the European Data Protection Board (EDPB) website for guidance as to compliance with EU laws that will continue to evolve in this area, such as the e-Privacy Regulation (E-PR).
  5. The UK is no longer part of the EU and is now treated under the EU GDPR as a ‘third country’. So there are certain legal requirements that must be considered before running a cross border promotional campaign, including ensuring the correct Terms & Conditions are in place, a data privacy notice is provided to entrants where there’s processing of their personal data and the use of Standard Contractual Clauses (SCCs) to safeguard the processing of EU citizens’ personal data if it is being processed by a UK based Data Controller.
  6. There may be a requirement for the brand owner or promoter to have a Representative based in the EU and the same applies for European-based brand owner to have a Representative based in the UK. Marketers should seek legal guidance and advice without delay.
  7. Marketers should take stock of any campaigns that commenced in 2020 and will run through 2021 to ensure that these comply with the requirements under the Withdrawal Agreement 2020.
  8. When running sales, price and prize promotions in the UK, marketers need to comply with the self-regulatory codes for non-broadcast and broadcast promotions that are overseen by the ASA and if your company is a member of the DMA, then the DMA Code is also applicable. Similar organisations and self regulatory bodies exist in all EU countries and their rules need to be followed by those operating in those countries. Ask PromoVeritas for more information.
  9. Care needs to be taken when considering prizes to offer. If things return to ‘normal’ sometime in 2021, holidays may be a popular choice of prize, allowing consumers to fulfil their dreams again. But travel always has some risk attached. If you are offering physical prizes, then you will need to consider the extra cost of freight, customs paperwork and duty if you are shipping from the UK to the EU. PromoVeritas now offer an EU based fulfilment service.
  10. Always consider the impact of currency fluctuations on your budgets, whether you are importing goods as prizes or planning  cross-border promotion campaigns. The value of the £ is likely to fluctuate more now that we are less connected with the EU and the Euro.

For detailed guidance for marketers involved in sales, price and promotion campaigns is contained in the 30 page ‘The Marketers Brexit Playbook’ available for FREE from PromoVeritas, email info@promoveritas.com and don’t forget to sign up to our free Brexit for Marketers Webinar where Ardi will be joined by PromoVeritas’ Head of Legal, Jorja Knight to explore the impact of Brexit on the marketing industry.

About the author

Ardi Kolah is an innovative global privacy advisor and founding editor of the Journal of Data Protection & Privacy. He’s been the Data Protection Officer for two NYSE-listed companies and he’s a doctorate researcher at Queen’s University Belfast in data privacy law and enforcement. He’s a Fellow of Information Privacy of the International Association of Privacy Professionals (IAPP).

« Sign-Up to our “Brexit for Marketers” Webinar PromoVeritas receives QuickBooks “Most Adaptive Small Business” 2020 award. »

Call us on 0203 325 6000 to find out how we can help your promotion

+44 (0)203 325 6000
info@promoveritas.com
  • Home
  • About Us
  • What We Do and Why
  • Our Work
  • News
  • Join the Team
  • Contact
Proud members of ISO-27001 Accredited Proud members of
Run it Right.
© 2022 PromoVeritas
Privacy Policy Terms of Service Website Terms & Conditions Cookies Policy
We use cookies on our website. All the cookies we use can be viewed using the Cookie Settings button. By clicking “ACCEPT” you consent to the use of all cookies. You cannot disable our essential cookies.
Do not sell my personal information.
Read More
ACCEPTCookie settings
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Essential
Always Enabled

Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

CookieTypeDurationDescription
cookielawinfo-checkbox-necessary011 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-non-necessary011 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Non Necessary".
viewed_cookie_policy011 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Non Essential

Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.

CookieTypeDurationDescription
_ga01 yearThis cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, camapign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assigns a randoly generated number to identify unique visitors.
_gat_UA-15728851-301 minuteThis is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
_gid01 dayThis cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the wbsite is doing. The data collected including the number visitors, the source where they have come from, and the pages viisted in an anonymous form.
bcookie01 yearThis cookie is set by linkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.
bscookie11 year
csrftoken011 monthsThis cookie is associated with Django web development platform for python. Used to help protect the website against Cross-Site Request Forgery attacks
GPS030 minutesThis cookie is set by Youtube and registers a unique ID for tracking users based on their geographical location
IDE11 yearUsed by Google DoubleClick and stores information about how the user uses the website and any other advertisement before visiting the website. This is used to present users with ads that are relevant to them according to the user profile.
ig_did11 year
ig_nrcb01 year
lang0This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.
li_sugr02 months
lidc01 dayThis cookie is set by LinkedIn and used for routing.
lissc01 year
mid01 yearThe cookie is set by Instagram. The cookie is used to distinguish users and to show relevant content, for better user experience and security.
test_cookie011 months
u02 months
UserMatchHistory01 month
VISITOR_INFO1_LIVE15 monthsThis cookie is set by Youtube. Used to track the information of the embedded YouTube videos on a website.
YSC1This cookies is set by Youtube and is used to track the views of embedded videos.
Save & Accept