GDPR EU says UK’s data protection framework ensures an adequate level of protection for personal data

The Commission has determined that the UK’s data protection framework ensures an adequate level of protection for personal data transferred from the EU, as the UK, GDPR and Data Protection Act 2018 are based on the GDPR; however, personal data transferred for UK immigration control purposes are excluded from the decision’s scope, the decision will automatically expire on June 27, 2025, and the Commission can intervene if the UK deviates from current protection levels.