EU grant data adequacy to UK but add sunset clause

Flows of personal data from the EU to the UK will continue, after the European Commission adopted two “data adequacy” decisions.

The news came as the temporary bridging period for the free flow of personal data from the EU to the UK came to an end on 30 June 2021.

The decisions include a sunset clause, meaning they run out after four years.

They will be renewed only if the UK ensures an adequate level of data protection, the commission said.

Didier Reynders, Commissioner for Justice, said the adequacy agreement was, “important for smooth trade and the effective fight against crime”.

Welcoming the decision, the UK government said it “plans to promote the free flow of personal data globally and across borders”.

“All future decisions will be based on what maximises innovation and keeps up with evolving tech,” it added.

The commission said in a press release that it reached its decision in part because: “The UK’s data protection system continues to be based on the same rules that were applicable when the UK was a member state of the EU.”

However, it added that it would “intervene” at any point if the UK deviates from the level of protection presently in place.

Some UK politicians have recently argued for changes to UK data protection law.

A report, commissioned by the prime minister, from The Taskforce on Innovation, Growth and Regulatory Reform chaired by Sir Iain Duncan Smith, said: “GDPR is already out of date and needs to be revised for AI and growth sectors if we want to enable innovation in the UK.”

Source: BBC News