International data transfers: UK adequacy, SCCs and the future for UK business
On 4 June 2021, the European Commission adopted a set of new and improved standard contractual clauses (SCCs) for personal data transfers from controllers or processors in the EEA to controllers or processors established outside the EEA. The EEA comprises the EU countries plus Iceland, Liechtenstein and Norway. Then just a couple of weeks later on 28 June 2021, the European Commission approved two final adequacy decisions in favour of the UK, one under the EU General Data Protection Regulation and another under the Law Enforcement Directive, securing the UK’s status as an adequate destination for the export of EEA-origin personal data.
