The UK is set to leave the EU on 31 January 2019. As the EU and the UK prepare for Brexit, companies should too. Brexit continues to raise many legal questions and uncertainties, not the least for the protection of personal data which flows between the UK and the rest of Europe. Will organisations in the UK still have to comply with the General Data Protection Regulation (GDPR)? Can they still transfer personal data to the EU? Will they need to appoint a representative in the EU? And what will happen with the one-stop-shop? On the basis of eight frequently asked questions, we provide an overview of issues to consider and steps to take to start preparing now in order to be ready for Brexit. Please find enclosed our memorandum on the topic.