The European Commission has confirmed that the UK data protection regime offers an adequate level of protection for personal data.
This means if you want to transfer personal data from Europe into the UK, you can do so without the need for extra security measures such as Standard Contractual Clauses or Binding Corporate Rules.
The adequacy status, for the first time, includes a “sunset” clause which means it is time-limited and will need to be re-negotiated in 4 years.
It will only be renewed if the UK maintains an adequate level of protection, so there could be a danger that this will not happen if the UK diverges too far from the EU data protection rules.
Changes to our privacy standards to reap greater economic rewards from data have been suggested by ministers which could jeopardise its renewal.
The decision has been heavily criticised by European lawmakers, regulators, and privacy activists, and it is more than likely that the UK data regime will come under intense scrutiny in the coming months and years.
Get in touch for any help with your data protection activities.
firstname.lastname@example.org – 07958 463371