{"id":2066,"date":"2022-08-24T15:06:59","date_gmt":"2022-08-24T13:06:59","guid":{"rendered":"https:\/\/www.privacy-advice.com\/aktuelles\/adequacy-decision-of-the-eu-commission-uk-is-a-safe-third-country\/"},"modified":"2022-09-26T17:23:37","modified_gmt":"2022-09-26T15:23:37","slug":"adequacy-decision-of-the-eu-commission-uk-is-a-safe-third-country","status":"publish","type":"aktuelles","link":"https:\/\/www.privacy-advice.com\/en\/news\/adequacy-decision-of-the-eu-commission-uk-is-a-safe-third-country\/","title":{"rendered":"Adequacy decision of the EU Commission: UK is a safe third country"},"content":{"rendered":"
\n

Shortly before the end of the transitional period, the EU Commission issued an adequacy decision on June 28, 2021, in accordance with Sec. Art. 45 EU GDPR issued for the United Kingdom (UK). The UK is thus recognized as a safe third country, so that personal data can be transferred unhindered from the EU to the UK even after Brexit.<\/p>\n<\/div>\n

\"\"<\/figure>\n
\n

Procedure<\/strong><\/h2>\n<\/div>
\n

In the first attempt, the EU Parliament on 20.05.2021 still rejected the approval of the adequacy decision with the United Kingdom by a narrow majority. As a result, the transition period would have formally expired on June 30, 2021. As the British are no longer a member of the EU or the European Economic Area (EEA) as of 01.01.2021, the UK is a third country and therefore Art. 44 et seq. EU-DSGVO have to be observed. As a consequence, the transfer of data to the United Kingdom as of 01.07.2021 would in principle only have been possible under the narrow conditions of Art. 46 EU GDPR. Accordingly, the transfer of personal data to a third country without an adequacy decision is only permitted if appropriate safeguards are in place, e.g., the transfer of personal data to a third country without an adequacy decision. when applying the standard contractual clauses, permissible.<\/p>\n<\/div>

\n

Now, just in time, the EU Commission was able to declare the United Kingdom as a third country with an adequate level of data protection. A new feature of the adequacy decision is that it contains a sunset clause for the first time, which limits the validity of the decision to four years.<\/p>\n<\/div>

\n

Criticisms of the European Data Protection Committee (EDSA)<\/strong><\/h2>\n<\/div>
\n

In its opinion, the EDSA informed the Commission that it did not oppose the release of a data transfer to the UK on the basis of the adequacy decision, but at the same time criticized the following two points:<\/p>\n<\/div>

\n