Good news for charities with EEA/UK data flows

Currently, transfers of personal data from the EEA to the UK are protected on a transitional basis only until 30 June 2021 under the Trade and Cooperation Agreement agreed at the end of last December as a result of the UK’s departure from the EU. The situation after has been uncertain.

The EU Commission has now, however, published draft adequacy decisions for transfers of personal data to the United Kingdom, under both the GDPR and the Law Enforcement Directive.

This will provide a greater degree of certainty for organisations who rely on cross-border data flows, and particular those of in data-rich sectors, such as healthcare.

For more on this welcome development, including what must happen next for the draft decisions to be adopted,  head over to our sister blog Technology Law Update.