The impact of Brexit on international data transfers

This thematic dossier aims to offer guidance to companies, public bodies and associations in Luxembourg that may transfer personal data to the United Kingdom and intend to pursue such transfers in 2021 and beyond.

On 28 June 2021, the European Commission adopted two adequacy decisions and found that the United Kingdom ensures an adequate level of protection for transfers of personal data, in accordance with the General Data Protection Regulation and the Law Enforcement Directive and with regards to national security.

Such a decision means that the UK's personal data protection regime offers safeguards that are "substantially equivalent" to those of the European Union and that transfers of personal data to the UK can be made as if it was a transfer within the European Economic Area (EEA).

Last update