EU Extends UK GDPR Adequacy Decision for Six More Years
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
The EU extended the UK’s GDPR adequacy decision for six years, ensuring continued free and safe data transfers until 2031 with a review in four years.
The EDPB supports the EU-Brazil data adequacy decision but requests clarifications on DPIAs, transparency, law enforcement data use, and national security definitions.
French MP Fabien Latombe will appeal the court ruling on the EU–US Data Privacy Framework, challenging its adequacy over US surveillance and redress shortcomings.
EDPB supports six-year extension of UK adequacy decisions to 2031 but urges the Commission to address legal changes, monitor risks and ensure robust oversight and remedies.
Eu court dismissed Latombe’s annulment of the EU‑US Data Privacy Framework, allowing data transfers to continue while advocates signal likely further legal challenges.
he EDPS calls for strong data protection safeguards in the EU’s common return system for third-country nationals to protect vulnerable individuals’ privacy and rights.
The Dutch Data Protection Authority is investigating DeepSeek over privacy concerns, fearing data may be unlawfully transferred to China, risking users’ and third-party information.
he UK is now the first country with Associate status in the Global Cross Border Privacy Rules (CBPR) Forum, opening up opportunities for international collaboration on data transfers.
The goal of the meetings is to gradually align the regulators’ approaches to privacy and better understand domestic rules in each jurisdiction.
The US Department of Homeland Security (DHS) is touting ‘Enhanced Border Security Agreements’, offering access to its vast biometric databanks in exchange for other states reciprocating.
The Danish data protection authority banned a municipality’s use of Google Workspace for Education and suspended all US transfers.
The EU Commission faces a lawsuit over allegations it is violating GDPR rules when transferring personal data from websites to the US.