Recently, the European Commission formally adopted two adequacy decisions for the United Kingdom under the EU General Data Protection Regulation (EU 2016/679) and the Law Enforcement Directive.
The decisions will allow for the free flowing of data from the European Union to the UK as the Commission has recognised the UK’s data protection regime provides an “essentially equivalent” degree of protection than that within the EU.
The decisions contain a sunset clause that means they will last four years and the Commission will continuously monitor the UK’s data protection regime to ensure its present level of protection is sustained.
Transfers for the purposes of UK immigration control are excluded from the decision – for more information please see here.