The European Data Protection Board (EDPB) has approved a six month extension of the EU’s data adequacy decisions for the United Kingdom. These decisions, which allow personal data to be transferred from the EU to the UK, were due to expire on 27 June 2025. They will now remain valid until 27 December 2025.
The extension gives the European Commission time to review upcoming changes to the UK’s data protection legislation. Since these changes are not yet final, the EDPB agreed that a short technical extension is necessary to maintain stability in data transfers between the EU and the UK.
The EDPB made clear that this extension is exceptional and should not be renewed again. It also reminded the Commission to closely monitor any developments in the UK that could affect the level of data protection.
This opinion does not assess the current level of protection in the UK. That review will come once the new UK legislation is in place and the Commission proposes a renewed adequacy decision. The EDPB also reaffirmed its 2021 opinions on the UK and encouraged the Commission to take them into account in future evaluations.
Click here to read the full opinion from the EDPB.
