EU Approves New UK Data Transfer Decisions
The European Commission renewed its two decisions allowing personal data flows between the EU and the U.K., it said Friday. It found that Britain's data protection legal framework is essentially equivalent to the EU's.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
The adequacy decisions were due to expire Dec. 27, the EC noted. The new ones run until Dec. 31, 2031. The EC and European Data Protection Board (EDPB) will assess how the decisions are working in four years.
The EDPB backed extending the decisions in October (see 2510200001).
The renewal "probably wins the prize for the most predictable data protection news of the year," IAPP Research and Insights Director Joe Jones posted Friday.
The new adequacy decisions have a "thorough assessment" of the U.K. Data (Use and Access) Act, as well as of wider relevant U.K. developments, Jones added. While Brussels once viewed various versions of British data protection reforms as potentially undermining EU GDPR protections, the EU now has "not only green-lit UK reforms, but is itself considering various proposed reforms to the GDPR" (see 2511260005).