In The European Financial Review, The DPO Centre’s CEO, Rob Masson, discusses what the EU granting the UK an adequacy decision would mean for companies within the UK. Data adequacy is a status that is granted by the European Commission to countries outside of the EEA, where the Commission believes that the level of personal data protection provided is ‘essentially equivalent’ to that provided in the EU by the EU GDPR.
Whilst a draft decision was published in February 2021, the article highlights the possibility that the UK may diverge too far away from the EU GDPR, at which point it is possible that the EU Commission could revoke its decision.
To read the full article, click here.
NB: This article was written prior to the UK receiving an adequacy decision in June 2021, thus allowing data to continue to flow freely between the UK and the EU, at least for now.