Health leaders can breathe a sigh of relief as EU Member states have voted to approve the adequacy decision on the UK data protection regime which provides legal certainty for patients and the sector.
The EU has adopted final versions of the two adequacy decisions that were issued in draft earlier this year. These permit personal data flows to the UK under the GDPR and the Law Enforcement Directive. This is just in time as the interim arrangement under the EU-UK Trade and Cooperation Agreement was due to end today (30 June). You can read the UK government's press release here.
Commenting on the results of the EU Member States vote on UK adequacy, Layla McCay, director of policy at the NHS Confederation, said:
“Recognition of this regime is vital to make sure both the UK and EU health sectors can function properly. The decision is instrumental to addressing cross-border health threats such as COVID-19, enabling the movement of professionals and facilitating crucial research, development, and cooperation."
The decisions will expire after four years, unless renewed.
The Commission will monitor the legal situation in the UK for any deviation from the level of protection currently in place. This could lead to the decisions being suspended, repealed or amended.
You can read the GDPR adequacy decision here and the LED adequacy decision here.
Our content explained
Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.