On 3rd October 2019, the UK and the US officially signed a new data-sharing agreement in an effort to provide law enforcement agencies from both parties with more timely access to digital evidence held by international service providers (eg web hosts or social media platforms).
This agreement was motivated by both nations experiencing significant delays in retrieving digital evidence overseas for the purposes of investigating international criminal offences. Under this new agreement, such delays are expected to be reduced from months (or sometimes even years) to weeks.
While most organisations are unlikely to be impacted by this agreement, any UK-based business that has the potential to receive an international digital evidence request from the US should be prepared to comply with this new time frame.
Further, organisations and individuals subject to a criminal investigation by US and UK authorities for data-related matters should be aware that evidence against them will be gathered faster than ever before. With this in mind, it’s crucial to ensure that your organisation is maintaining GDPR compliance and storing data securely.
Although the agreement has not yet been published, TH March will be sure to provide you with updates, compliance guidance and insurance solutions on the matter as soon as anything changes.