Brussels: Today, the European Commission has initiated the adoption process for new adequacy decisions to facilitate the free flow of personal data between the European Economic Area and the United Kingdom. This follows an assessment of the UK’s Data Use and Access Act, which has been deemed by the Commission to provide data protection safeguards equivalent to those in the EU.
According to Cyprus News Agency, Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security, and Democracy, emphasized the importance of data protection as a core EU value and highlighted the UK’s role as a key partner. She stated that the decision is a testament to the EU’s commitment to privacy and its partnership with the UK. Michael McGrath, Commissioner for Democracy, Justice, the Rule of Law, and Consumer Protection, noted the significance of unobstructed data flow for businesses and authorities on both sides of the Channel, underscoring its necessity for commerce, research, and cooperation in law enforcement.
As part of the adoption procedure, the draft decisions will be sent to the European Data Protection Board for its opinion. The Commission will also seek approval from a committee of EU Member State representatives, and the European Parliament will exercise its right of scrutiny over these adequacy decisions.
In June 2025, a technical extension of the 2021 adequacy decisions was adopted to allow for an assessment of the UK’s new data rules. The UK’s Data Use and Access Act, which received Royal assent on 19 June 2025, includes provisions on automated data processing and the structure of the UK’s data protection authority. These new draft decisions are based on the assessment of these rules, with further information available online.