News · EDPB EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

The United Kingdom's draft decisions regarding adequate protection: The EDPB issues opinions.

This is a machine translation back into the original’s language. The original: Draft UK adequacy decisions: EDPB adopts opinions
Privacy Shield Supervision IP Address International Transfer Accountability
Oct 20, 2025
Summary

Brussels, October 20th - During its latest plenary meeting, the EDPB (European Data Protection Board) adopted two opinions on the draft decisions of the European Commission regarding the extension of the validity of the decisions on the adequacy of the United Kingdom, as stipulated in the General Data Protection Regulation (GDPR) and the Law Enforcement Directive (LED), until December 2031. The EDPB opinions, requested by the Commission under Article 70(1)(s) of the GDPR and Article 51(1)(g) of the LED, address the proposed six-year extension of the two decisions on the adequacy of the United Kingdom, which are currently due to expire.

Full text

Brussels, October 20th - During its latest plenary meeting, the European Data Protection Board (EDPB) adopted two opinions on the draft decisions of the European Commission regarding the extension of the validity of the decisions on the adequacy of the United Kingdom, as established under the General Data Protection Regulation (GDPR) and the Enforcement and Cooperation Directive (ECD). The EDPB's opinions, requested by the Commission based on Article 70(1)(s) of the GDPR and Article 51(1)(g) of the ECD, address the proposed six-year extension of the two decisions on the adequacy of the United Kingdom, which are currently due to expire in December 2025. The extension of the validity of the decisions on the adequacy of the United Kingdom allows organizations and supervisory authorities based in Europe to continue transferring data to organizations and authorities in the United Kingdom, without having to implement additional safeguards. "The EDPB welcomes the ongoing alignment between data protection regulations in the United Kingdom and Europe, despite recent changes in UK legislation. I urge the European Commission to address the points raised by the EDPB and to..."

This content has been automatically translated using machine translation. The original version is available in the source language.

This content was automatically translated using machine translation. The original version is available in the source language.

How it connects

References

Related across sources

C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield Supervision IP Address
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). ·CJEU Jan 9, 2025 IP Address Retention Period Identification
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB May 25, 2018 Privacy Shield Lawful Basis Legitimate Interest
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB Feb 24, 2023 Certification International Transfer Processing Agreement
Guidelines 02/2024 Article 48 GDPR Article 48 GDPR provides that: ' Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to… Guidelines ·EDPB Jun 5, 2025 Controllers Privacy Shield International Transfer
Related documents