The European Commission has announced today that it has formally launched the adoption process for two adequacy decisions concerning the transfer of EU personal data to the UK.  The decisions cover data transfers in relation to the General Data Protection Regulation and the Law Enforcement Directive.  Companies will be relieved that transfers of customer and employee data from across the channel will largely be subject to the same conditions required pre-Brexit.  Data can also continue to be shared between countries for law enforcement purposes.

The EU's data protection authorities  will now be asked to review the Commission's draft decisions and collectively provide their opinion through the European Data Protection Board before Member States are then asked to ratify them before the final adequacy decisions are adopted.  Once adopted, these decisions will be valid for a period of four years, at which point the decisions can be further renewed.  In the meantime, EU to UK data flows will continue to be subject to the provisions of the EU-UK Trade and Cooperation Agreement which expires at the end of June 2021.

 Draft decision on the adequate protection of personal data by the United Kingdom - General Data Protection Regulation

Draft decision on the adequate protection of personal data by the United Kingdom: Law Enforcement Directive