It will come as a relief to many to hear that the European Data Protection Board (EDPB) has supported the European Commission (EC)’s proposal to extend the adequacy decision in favour of the UK’s protection of personal data until 27 December 2025. This was originally set to expire on 27 June 2025.
This will allow organisations to continue to transfer personal data between the EU and UK for a further 6 month period, without the need to implement additional safeguards, such as Standard Contractual Clauses.
The background to this is that the UK is in the process of finalising its new Data (Use and Access) Bill. Various reforms to the treatment of personal data in the UK are expected to result from this Bill. Presumably, once its wording is finalized, the EDPB and EC will make a final decision as to whether to extend the adequacy decision for a longer period.
Madeleine Rhodes email: mrhodes@redfernlegal.com
