On 28 June 2021, the European Commission adopted two adequacy decisions and found that the United Kingdom ensures an adequate level of protection for transfers of personal data, in accordance with the General Data Protection Regulation and the Law Enforcement Directive and with regards to national security.
Such a decision means that the UK's personal data protection regime offers safeguards that are "substantially equivalent" to those of the European Union and that transfers of personal data to the UK can be made as if it was a transfer within the European Economic Area (EEA).