01 Jan 2021

Now that the 'Transition' period following the United Kingdom’s exit from the EU is over, the UK privacy regulation, also known as the “UK GDPR”, has come into force, replacing the EU GDPR.

Having also entered into a Trade & Co-operation Agreement, the transition period for personal data transfers from the EU (or EEA) to the UK has been extended for up to six months. During this period, the UK may not change its data protection laws without the EU’s agreement or the extended transition period will terminate.

The agreement, therefore, allows for the continued flow of personal data from the EU to the UK after which they will be considered as international transfers under the EU GDPR unless the EU has approved an 'adequacy' decision in the UK's favour.

For transfers from the UK, the UK GDPR adopts the EU's list of countries counted as adequate and transfers of personal data to these countries remain valid.