Transfers Between The UK And The U.S. Now Subject To An Adequacy Decision

The UK Department of Science, Innovation and Technology (DSIT) announced on September 21 that the UK Extension to the EU-U.S. Data Privacy Framework (the Data Bridge) will enter into force on October 12. The Data Bridge will allow certifying entities to easily transfer personal data from the UK to the U.S., which would otherwise be prohibited under the UK General Data Protection Regulation (UK GDPR) without transfer mechanisms (such as the standard contractual clauses (SCCs) or binding corporate rules (BCRs)).

Background: The EU-U.S. Data Privacy Framework

As previously discussed, the European Commission adopted an adequacy decision in favor of the EU-U.S. Data Privacy Framework (DPF) on July 10. The DPF is a replacement for the EU-U.S. Privacy Shield, which was declared invalid by the Court of Justice of the European Union (CJEU) in the Schrems II decision of July 2020. The adequacy decision followed the adoption of Executive Order on Enhancing Safeguards for