UK data protection laws approved by the European Union

Jul 9, 2021
On 28 June the European Commission announced that ‘adequacy’ decisions for the UK had been approved.


This means they have determined the UK’s data protection laws to be robust enough to ensure data can safely flow to the UK from the European Union, without the need for transferring organisations to put further safeguards in place.

Failure to get a positive decision would have required British businesses to review and possibly amend existing contracts and set up more costly, bureaucratic alternatives when receiving any personal data from a business in the European Union.

The UK will retain 'adequate' status for four years, but the commission warned that could be withdrawn at any time if UK law was no longer deemed to offer EU citizens protection over how their data was used.