EU adopts data adequacy decisions

Personal data may continue to flow freely between Europe and the UK following agreement by the European Union to adopt ‘data adequacy’ decisions, which mean that organisations in the UK can continue to receive personal data from the EU and EEA without having to put in place additional arrangements with European counterparts.

The UK, which now operates a fully independent data policy, has already recognised the EU and EEA member states as ‘adequate’, as part of its commitment to establish a smooth transition for the UK’s departure from the bloc.

Welcoming the announcement, John Foster, the CBI’s director of policy said: “This breakthrough in the EU-UK adequacy decision will be welcomed by businesses across the country.

“The free flow of data is the bedrock of the modern economy and essential for firms across all sectors, from automotive to logistics, playing an important role in everyday trade of goods and services.

“This positive step will help us move forward as we develop a new trading relationship with the EU.”

    Share Story:

Recent Stories


Cyber physical risks
Property damage as a consequence of cyber attack is often excluded from standard property policies, but as the industrial internet of things expands, so too do the risks. This podcast examines the evolving threat landscape. Published October 2021

Financial institutions were early adopters of cyber security and insurance. Are they still on top of the game?
Managing huge amounts of sensitive data online makes financial institutions a prime target for hackers. As such, the sector was an early cohort for insurers in creating cyber cover. Since then, the market has evolved almost beyond recognition. It continues to challenge itself to this day, complying with rigorous regulatory demands and implementing avant-garde enhancements to keep abreast of the ever-changing risks. Published June 2021

Advertisement