Gudiance
A lot of the guidance from the Article 29 working party is yet to be published so its going to be interesting to see how many changes are required in this bill before it truly meets the requirements of GDPR.
Of course this also crosses the Maybots red line regarding the ECJ as they will make rulings which the UK will have to comply with to continue to do business with EU nations. Its going to be interesting to see how they spin that.
Whichever way you slice and dice it we will have no voice or say, and if the EU decides on an arbitary basis that as a 3rd country we no longer meet the requirements then its game over for a lot of tech business. Any global business with half a brain is going to move its data processing operations to the EU27 rather than risk a negative determination as a third country which also means that UK citizens data will be housed in an area we have no say or influence over.
Apparently, when it comes to data 'taking back control' really means dropping our pants and wondering why everyone is pointing and laughing.