UK Government Makes A Bridge To The EU-U.S. Data Privacy Framework

On 21 September 2023, the UK Government adopted the Data Protection (Adequacy) Regulations 2023, also referred to as the "UK-U.S. Data Bridge". The UK-U.S. Data Bridge will allow companies to legitimately transfer personal data from the UK to the U.S. on the basis of the recently enacted EU-U.S. Data Privacy Framework ("DPF").

The UK Government decided to facilitate data flows from the UK to the U.S. by taking advantage of the existing DPF and establishing a UK extension to the DPF. The DPF is built on key data protection principles aimed to safeguard personal data that is transferred to the U.S. In addition, the DPF provides individuals (whose data is transferred) with specific rights such as the right to obtain access to, correction, or deletion of their personal data, as well as new redress possibilities for individuals. Companies in the U.S. that "import" personal data from Europe can self-certify to the DPF, by having their name added to the DPF list and