When the UK leaves the EU after the end of the Brexit transition period, the UK will become a third country for the purposes of data transfers from the EU. This will mean that transfers that had previously been made between the UK and the rest of the EU, which would have been internal transfers within the EU, will now become international transfers. And, under the GDPR, international transfers are prohibited unless there are appropriate safeguards in place to protect the data.