However, there are already mitigation measures in place that maintain some free cross-border movement of UK and EU citizens. The Withdrawal Agreement of November 2019 preserves the established EU law rights of EU citizens already residing in the UK, and of UK citizens already residing in the EU by the end of 2020 – so they remain free to take advantage of the EU rights of free movement, although they will have to apply for a status under the applicable rules and within set timescales to be able to continue doing so beyond June 2021. For non-business travel, the EU has provided, as has the UK, that short-term stays may continue without any visa requirements.
Personal data transfers
The issue of whether personal data transfers from the EU to the UK may continue freely has been the subject of difficult discussions between the UK and EU this year, separate from the trade negotiations, about a potential EU decision on the adequacy of the UK's data protection regime. With the EU still pressing the UK for reassurances on current safeguards and future plans for departing from EU data protection legislation, it appears increasingly unlikely that an 'adequacy decision' will be in place by the end of the year.
The Withdrawal Agreement of November 2019 will provide some certainty, in that it authorises the processing of personal data that was transferred between the EU and UK before 31 December, as long as that data is processed under the terms of the GDPR. For transfers to the UK from 1 January, there is no avenue other than an adequacy decision for the EU to allow a temporary continuation for the free flow of personal data. Businesses will instead need to take their own mitigation steps to provide safeguards for data they need to transfer to the UK.