A New Era for UK Data Protection Law: Reform of the UK GDPR and Proposed Renewal of EU Adequacy
(2025) , 3 pages
Files
20250828_A_New_Era_for_UK_Data_Protection_Law.pdf
Open Access - Adobe PDF
- 529.73 KB
Details
- Authors
- Abstract
- (en) The United Kingdom data protection legal framework has been reformed. The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 and while some of its provisions came into force automatically, others will be commenced via regulations issued by the Secretary of State in four main stages, the first of which took effect on 20 August 2025. Concurrently, as the UK charts its own regulatory path, the European Union intends to confirm the UK’s adequacy status under both the GDPR and the Law Enforcement Directive (LED). On 22 July 2025, the European Commission published two draft decisions proposing a six-year renewal, under both the GDPR and the LED, of the UK’s status as a country offering an adequate level of protection for the purposes of international transfers of personal data. With the UK’s DUAA, compliance with data protection law is no longer ‘one-size-fits-all’: alignment exists, but uniformity is gone. And with the proposed EU renewal of the UK’s adequacy status, signalling continued fundamental alignment despite regulatory divergence, personal data are likely to keep being transferred freely from the EU/EEA to the UK.
- Affiliations
Citations
D’hulst, T., Kloza, D., & Memic, A. (2025). A New Era for UK Data Protection Law: Reform of the UK GDPR and Proposed Renewal of EU Adequacy. https://hdl.handle.net/2078.5/260003