ARTICLE · 15 APRIL 2025

Technology And Innovation Client Update: January To March 2025 - Data Protection

Arthur Cox

Explore more from Arthur Cox

The European Commission proposed to adopt an extension of the two 2021 adequacy decisions with the UK for a period of six months.

European UnionPrivacy

Author LinkedIn connections

Extension of UK Adequacy Decisions

DATE OF UPDATE: 18 March 2025

APPLICABLE DATES:

The proposed extension is until 27 December 2025.

LINKS

Commission proposes to extend adequacy decisions for the UK by six months for free and safe data flows - EC Daily News

Amending Implementing Decision (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (PDF, 106KB)

CURRENT STATUS

The European Commission proposed to adopt an extension of the two 2021 adequacy decisions with the UK for a period of six months.

Once the UK's legislative process on the Data Bill introduced in the UK Parliament on 23 October 2024 concludes, the Commission will then assess whether the UK continues to provide an adequate level of protection for personal data.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

This article contains a general summary of developments and is not a complete or definitive statement of the law. Specific legal advice should be obtained where appropriate.

Related Articles

Corporate Update October 2026 - Listed Companies

European UnionPrivacy

Horizon Scanner Finance October 2026 - European Developments

European UnionPrivacy

Corporate Update October 2026 - Sustainability Reporting & ESG

Horizon Scanner Finance October 2026 - Irish Developments

Horizon Scanner: Energy Planning Infrastructure And Construction - October 2026 - State Aid

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Privacy
- Data Protection

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

Privacy

The Data Protection Commission’s 2025 Annual Report

Ireland's Data Protection Commission received a record 16,160 new cases in 2025, marking a 45% increase from the previous year, while imposing over €530 million in administrative fines. The Commission finalized four major inquiries, with the TikTok decision accounting for €530 million of the total penalties, and concluded 208 cross-border complaints as Lead Supervisory Authority.

The Data Act – Part I: Key Considerations Regarding Data Access And Sharing

The EU Data Act, which became applicable on 12 September 2025, fundamentally reshapes how businesses handle data generated by connected devices and related services. With Ireland's General Scheme published in February 2026 designating ComReg and CCPC as enforcement authorities, companies must now assess their compliance obligations across data sharing frameworks, contractual terms, and user access rights or face significant fines.

Verify, Guarantee, Demonstrate: The TikTok Decision And What It Means For International Data Transfers

The Irish High Court has delivered a landmark judgment in TikTok's appeal against the Data Protection Commission's €530 million fine, establishing that organizations must not only identify appropriate transfer...

European UnionPrivacy

The Data Act – “Access By Design” Requirement Comes Into Force

The European Union's Data Act introduces a groundbreaking "access by design" requirement that fundamentally changes how manufacturers must approach product development for connected devices and IoT products. From September 2026, businesses placing connected products on the EU market must ensure users can directly access their generated data by default, shifting data accessibility from a reactive request-based model to a proactive design imperative.

Part 2: AI Act Articles 50(3) And 50(4) Transparency Obligations

The European Commission has issued interpretive guidelines on Article 50 of the AI Act, clarifying transparency obligations for emotion recognition systems, biometric categorization, and deepfake content.

William Fry LLP

EDPB 2025 Annual Report: Recent Trends

The European Data Protection Board's 2025 Annual Report reveals significant developments in EU data protection enforcement and regulatory cooperation. With approximately €1.15 billion...

McCann FitzGerald LLP

EU Digital Omnibus Regulations – What Has Been Proposed?

On 19 November 2025, the European Commission published its draft Digital Omnibus Regulations (EU Regulations 2025/0360 and 2025/0359).

European UnionPrivacy

The Data Act: “Access By Design” Requirement Comes Into Force For Medical Devices

The Data Act's "access by design" requirement came into force on 12 September 2026, mandating that manufacturers of connected products and providers of related services must enable direct user access to generated data by default. This article examines the scope of this new obligation and its practical implications for businesses in the Life Sciences sector, particularly those developing medical devices and Internet of Things products.

International Data Transfers: EU Commission Publishes New SCCs

Today the European Commission published its much anticipated decision on the new standard contractual clauses ("SCCs") for the transfer of personal data from the European Union to third countries, and the template SCCs.

European UnionPrivacy

EDPB Opinion On AI Models And Data Protection Compliance

On 17 December 2024, the European Data Protection Board ("EDPB"), following a first of its kind request from the Data Protection Commission ("DPC") under Article 64(2) of the GDPR...

Byrne Wallace Shields LLP