EU extends UK data adequacy decision until 2031

The European Union has renewed its adequacy decision, ensuring the continued free flow of personal data between the EU and the United Kingdom for at least six more years. This decision, set to last until December 27, 2031, provides a significant level of certainty for businesses and organizations reliant on cross-border data transfers, based on information published by The Register.

The renewal allows personal data to move safely and freely between the European Economic Area and the UK, as the UK's data protection framework is deemed essentially equivalent to the EU's General Data Protection Regulation (GDPR). This decision follows a temporary six-month extension granted in June 2025. The European Commission's renewal comes despite previous UK government intentions to diverge from EU data protection laws post-Brexit, which had raised concerns about jeopardizing this adequacy. The UK's recent Data Use and Access Act, which introduced new data handling provisions, has not altered the EU's assessment.

The extension until 2031 offers a stable regulatory environment for data sharing, mitigating risks for businesses and fostering continued digital trade. While the UK government had previously signaled a desire for greater data law divergence, the EU's decision underscores the importance of maintaining robust, equivalent data protection standards for international data flows and highlights the ongoing need for alignment on privacy regulations.

Source: The Register