EU Commission renews UK data protection adequacy

In a significant development for cross-border data flows, the European Commission has renewed its adequacy decisions with the United Kingdom, ensuring that personal data can continue to move freely and securely between the EU and the UK without additional transfer safeguards until 27 December 2031. These updated decisions replace the interim extensions that were set to expire at the end of 2025 and reflect the Commission’s conclusion that the UK’s data protection framework remains essentially equivalent to EU standards.

For organisations operating across both jurisdictions, this renewal provides welcome legal certainty. Under the GDPR, an adequacy decision means that EU-UK personal data transfers are treated as if they took place within the EU’s internal market, removing the need for mechanisms such as standard contractual clauses or binding corporate rules for most routine transfers. This substantive continuity is critical for multinational companies, service providers, and group structures with integrated data processing activities.

The Commission’s assessment took into account recent changes to the UK’s domestic data protection regime, including the enactment of the Data Use and Access Act 2025 (DUAA) and subsequent legal shifts away from some retained EU law concepts. Despite these evolutions, the Commission determined that the level of protection for personal data remains aligned with the core principles and rights guaranteed under the GDPR. Regular monitoring and periodic reviews have been built into the new decisions, underscoring the dynamic nature of adequacy status and the need for businesses to stay alert to future developments.

For businesses, the message is clear: cross-border operations can proceed without disruption, but regulatory divergence remains a live issue. Organisations with UK touchpoints should continue monitoring legislative developments and ensure their compliance frameworks are flexible enough to respond if the adequacy landscape changes in the future.