Data protection adequacy decisions - just in time

The EU has adopted final versions of the two adequacy decisions that were issued in draft earlier this year. These permit personal data flows to the UK under the GDPR and the Law Enforcement Directive. This is just in time - the interim arrangement under the EU-UK Trade and Cooperation Agreement was due to end on 30 June.

The decisions come into force today and will expire after four years, unless renewed.

The Commission will monitor the legal situation in the UK for any deviation from the level of protection currently in place. This could lead to the decisions being suspended, repealed or amended.

Press releases from the EU and UK sides welcome the development. 

You can see the GDPR adequacy decision here and the LED adequacy decision here


Our content explained

Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.

Posted by


Mills & Reeve Sites navigation
A tabbed collection of Mills & Reeve sites.
My Mills & Reeve navigation
Subscribe to, or manage your My Mills & Reeve account.
My M&R


Register for My M&R to stay up-to-date with legal news and events, create brochures and bookmark pages.

Existing clients

Log in to your client extranet for free matter information, know-how and documents.


Mills & Reeve system for employees.