EU Commission Extends UK Data Adequacy Decision to December 2025
On March 18, 2025, the European Commission proposed extending its adequacy decision for the United Kingdom, allowing the continued free flow of personal data from the EU to the UK until December 2025. The current adequacy decision, which originated in 2021 following the UK’s exit from the European Union, is scheduled to expire on June 27, 2025. This extension aims to ensure that businesses and organizations can maintain seamless data transfers while the UK finalizes its legislative reforms in data protection.
The UK is currently in the process of passing the Data (Use and Access) Bill, which seeks to amend certain provisions of the UK GDPR. One of the primary goals of this legislation is to reduce regulatory burdens for entities operating under its framework. Once this legislative process is completed, the European Commission will evaluate the new data protection framework in the UK to determine if it continues to offer sufficient protection for personal data.
Following the assessment, the European Commission may propose a renewal of the adequacy decision if it finds that the UK meets the necessary standards. The draft extension decision will be sent to the European Data Protection Board for review. If the board approves the extension, it will be valid until December 27, 2025, ensuring ongoing compliance and protection for personal data shared between the EU and the UK.
