EU UK Adequacy Decision

On 18 March, 2025, the European Commission (the “Commission") announced its proposal for a six-month extension to the UK's data adequacy decisions. The extension is currently under review by the European Data Protection Board (“EDPB”) and, if approved, will push the expiration date for both decisions from June 27, 2025, to December 27, 2025. This extension will ensure the continued free flow of personal data between the EU and the UK while the Commission carries out a full review of the UK's data protection framework. 

The original adequacy decisions, granted in 2021, confirmed that the UK's data protection laws provide a level of security equivalent to EU standards, allowing data to move freely without additional safeguards. Without an extension, businesses and organisations handling cross-border data transfers would be faced with legal uncertainty and the potential need to adopt alternative transfer mechanisms.