Just two days before the expiry of the bridging period, on 28th June the EU Commission adopted two adequacy decisions for the UK – as a result, personal data can now flow freely from the EU to the UK where it benefits from an essentially equivalent level of protection to that guaranteed under EU law.
This means that, as per data flows from the UK to the EU, data can continue to flow freely without the need for additional safeguards, such as the EU Standard Contractual Clauses.
This will be very welcome news for those of you who transfer personal data from the EU to the UK or receive personal data from EU controllers.
The adequacy decision includes a so called ‘sunset clause’ which limits the duration of the decision to 4 years. At that time, it will automatically expire and so will need to be renewed. During the four years, the EU Commission will continue to monitor the legal situation in the UK and could intervene at any point if the UK deviates from the level of protection currently in place.