Good News for a New Year - 2026.

UK-EU Data Transfers:

The EU extended its data adequacy decisions for the UK, originally set to expire in June 2025, to December 27, 2025, to allow assessment of the UK's new Data (Use and Access) Act (DUAA).

Then, on December 19, 2025, the European Commission officially renewed these decisions for another six years, until 27th December 2031, ensuring continued free flow of data from the EU to the UK under GDPR and the Law Enforcement Directive.

The ICO confirmed this new framework, incorporating the DUAA (Data Use and Access Act), maintains equivalent data protection standards.

UK-US Data Bridge:

This framework, an extension of the EU-US DPF for UK data, continued to function, allowing UK organizations to transfer data to US companies certified under the scheme.

The Information Commissioner's Office (ICO) confirmed the Data Bridge provides adequate protection, but noted potential legal challenges and the need for vigilance.