Guernsey Retains Its EU Adequacy – As Expected

The post-Brexit regulatory landscape continues to throw up challenges and jurisdictional arbitrage, but there are some areas where consistency and stability are welcome. The recent confirmation from the European Commission that 11 jurisdictions had retained their "adequacy" status from a data protection perspective has left many breathing a (long anticipated) sigh of relief. All three of the Crown Dependencies (Guernsey, Jersey and the Isle of Man) have retained the coveted status.

First published in Privacy Laws & Business, March 2024

International data transfers remain a source of concern, as risk assessments are often required, plus there has been uncertainty as to the efficacy of certain safeguards used previously. The "adequacy" status provides a good degree of comfort, as data flows to those jurisdictions can continue as they have done for years, without additional requirements.