Digital Policy Alert logo

Progress

Current status
in force
19 Dec 2025in force
16 Oct 2025under deliberation
22 Jul 2025under deliberation

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
United Kingdom
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
central government
data protection authority
Implementation Level
supranational

Timeline of events

19 Dec 2025
in force

European Commission adopted implementing decision on further extension of 2021 adequacy decision for free flow of personal data between EEA and UK

On 19 December 2025, the European Commission adopted an implementing decision amending implementing decision (EU) 2021/1772 to confirm the United Kingdom's continued adequacy status for personal data protection. The decision applies to all controlle…

  • European Commission adopted implementing decision on extension of adequacy decision for free flow of personal data between EEA and UK, European Commission (Official)
Event typeorder
Action typeimplementation
Government branchexecutive
Government bodycentral government
16 Oct 2025
under deliberation

European Data Protection Board issued opinion on draft implementing decision on adequate protection of personal data by United Kingdom

On 16 October 2025, the European Data Protection Board (EDPB) issued the opinion 26/2025 on the European Commission draft implementing decision pursuant to Article 45(2) of Regulation (EU) 2016/679 on the adequate protection of personal data by the …

  • Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom, European Data Protection Board (EDPB) (Official)
Event typeorder
Action typeopinion
Government branchexecutive
Government bodydata protection authority
22 Jul 2025
under deliberation

European Commission issued draft implementing decision on adequate protection of personal data by United Kingdom

On 22 July 2025, the European Commission (EC) published a draft decision on the adequate protection of personal data in the United Kingdom (UK) (Commission Implementing Decision pursuant to Article 45(3) of Regulation (EU) 2016/679 to renew and amen…

  • Draft Renewal of EU adequacy decision for the UK under the GDPR, European Commission (Official)
Event typeorder
Action typedrafting
Government branchexecutive
Government bodycentral government