The European Commission’s resolution to adopt the ‘adequacy’ decision for the UK under the General Data Protection Regulation (GDPR), allowing the continued free flow of personal data from the European Union to the UK, has been greeted with much relief by the business community. It means that – at least for the next four years – personal data can continue to flow freely, and firms don’t need to adopt other bespoke and potentially costly measures to comply with data protection rules. Should the UK decide to exit the GDPR, then of course the European Commission will reassess its position.
Check out the latest trends and innovations in the legal technology world
Data protection compliance
In light of Brexit, it’s good news indeed that the EU has acknowledged the UK’s adequacy for data transfers to the nation as a third country, both under the GDPR and the Law Enforcement Directive. Whilst we remain optimistic that this adequacy will be ratified within the coming weeks there are two further hurdles to jump – a non-binding EDPB (European Data Protection Board) advisory and all Member States to agree with the EU’s decision.