In the event of a no-deal Brexit and there is no adequacy decision or any other mechanism specifically agreed between the UK and the EU for the transfer of data, the UK would be a third country and it will be necessary for any transfers of data, that go between the UK and the EU, to comply with the requirements contained in the GDPR for transfers outside of the EU. Under the GDPR, international transfers are specifically prohibited unless there are appropriate safeguards in place before any transfers take place.