Commission Officially Extends EU-UK Data Adequacy Decisions by Six Months
The European Commission has extended the validity of two adequacy decisions with the United Kingdom by six months, enabling the uninterrupted free flow of personal data between the EU and the UK until December 27, 2025. This extension was proposed earlier in March to allow the UK sufficient time to finalize its new Data Bill. Last week, the UK officially adopted the Data Bill, and the Commission is currently evaluating whether the updated legal framework provides an adequate level of data protection in line with EU standards.
During this assessment period, the key safeguards established in the UK’s legal framework, which were deemed adequate in 2021, remain fully applicable to all personal data transferred from the EU. These safeguards ensure that data protection rights for EU citizens are maintained when their data is processed in the UK. This continuity is crucial for businesses and public authorities relying on cross-border data flows for trade, justice, and law enforcement cooperation.
Henna Virkkunen, Executive Vice-President for Tech Sovereignty, Security and Democracy, emphasized the importance of maintaining smooth data flows between the EU and UK, as both represent some of the most digitally interconnected markets worldwide. The six-month extension allows the Commission to thoroughly review the UK’s new Data Bill and decide on the long-term renewal of the adequacy decisions.
Michael McGrath, Commissioner for Democracy, Justice, the Rule of Law, and Consumer Protection, highlighted that data is essential for trade and cooperation in justice and law enforcement. The extension guarantees continued stability and uninterrupted data exchange, supporting businesses and authorities on both sides. This decision follows a positive opinion from the European Data Protection Board and approval from EU Member States, reflecting the ongoing commitment to strong data protection standards.
