The EU supports sharing personal data with the UK as the deadline nears

BRUSSELS, June 28 (Reuters) – The European Union has agreed that UK standards for the protection of personal data are high enough to continue to allow the flow of information between the Union and its former member, the European Commission said on Monday.

The EU executive has taken two “adequacy” decisions that include safeguards such as an automatic four-year expiration. This is the first time the EU has used such a ‘sunset clause’.

Its decisions relate to the overriding EU General Data Protection Regulation (GDPR) and a directive on the processing of personal data in connection with crime, in particular of victims, witnesses and suspects.

The decisions affect UK companies that rely on international data flows or operate within the EU and need access to customer data. They would also ensure the flow of data for police and prosecutors investigating cross-border crime.

The adequacy decisions will be renewed when the UK rules meet EU standards. The Commission could also intervene during the four-year period if the UK deviates from the current level of protection.

The decisions were required by June 30 to allow for a seamless transition at the end of a six-month grace period allowing inflows following Britain’s final exit from the Union.

EU member states backed the Commission’s proposals earlier this month. Continue reading

The EU has previously recognized the data standards of other countries such as Argentina, Canada, Israel, Japan, New Zealand and Switzerland as adequate.

Reporting by Philip Blenkinsop; Edited by Alexander Smith

Our standards: The Thomson Reuters Trust Principles.