UK Adequacy: The Future of Data Transfers
On February 19, 2021, the European Commission published its draft UK adequacy decision for the transfer of personal data to the UK. In the draft, the Commission highlighted that after a period of assessment, that the UK's law and practice on personal data protection ensures an essentially equivalent level of protection to personal data to that guaranteed under both the GDPR and the Law Enforcement Directive. Additionally, the Commission noted that, if adopted, the draft decisions would be valid for a period of four years, after which the adequacy finding could be renewed if the level of protection in the UK continues to be adequate.
Data flows between the European Economic Area and the UK will remain safeguarded under the conditional interim regime that was agreed in the EU-UK Trade and Cooperation Agreement until 30 June 2021.
UK Adequacy Decision Reaction & Analysis
OneTrust DataGuidance hosted a reactionary webinar looking at the Commission’s draft decision. During the presentation, we discussed first thoughts on the decision and what this might hold for the future of UK privacy as well as unpacking the Commission’s findings, what this might mean for businesses moving forwards, and the impact this might have on cross-border commerce.
Key takeaways include:
- An understanding of the European Commission’s draft UK Adequacy Decision
- Reaction to the draft UK Adequacy Decision
- What the decision means for the future of EU-UK relations regarding data protection
Further UK Adequacy Resources:
- OneTrust DataGuidance News: EU: European Commission publishes draft UK adequacy decision
- ICO Statement on European Commission draft: ICO statement in response to the publication of a draft adequacy decision from the European Commission
- OneTrust DataGuidance Insight Article: Europe: Necessary, proportionate, and adequate - European Commission issues draft adequacy decision of UK