EU Says That UK Data Protection Rules Are ‘Adequate’

The European Union (EU) has now officially agreed to accepts the UK’s current Data Protection standards after a discussion which has been going on for over a year and the EU confirms that that UK data protection standards are “adequate” for the next four years. This important ruling allows digital information continue to flow between the UK and the EU internal market.

The EU has, however, warned the British government that the decision could be revoked “immediately” if it sees weakening UK standard and Brexit supporters in the the Westminster Parliament are pressing Prime Minister Johnson to ditch the “prescriptive and inflexible” EU GDPR regime.

Organisations that shares data between the UK and EU could be heavily affected if Brussels decides to withdraw adequacy.

Indeed, a  Taskforce set up by the Prime Minister has the mission to “seize new opportunities from Brexit” said GDPR should be replaced with UK laws on data protection. The EU’s GDPR “overwhelms people with consent requests and complexity they cannot understand while unnecessarily restricting the use of data for worthwhile purposes”, states the  Taskforce report on Innovation, Growth and Regulatory Reform.  “The UK’s departure from the EU after 45 years offers a one-off opportunity to set out a bold new UK regulatory framework based on a set of principles embedded in UK common law, which prioritises innovation, growth and inward investment as part of the UK’s new global trading freedom, building on the UK’s global reputation for leadership in setting the highest standards of environmental and consumer protection." 

The Taskforce says that consumers needed stronger rights, while data should allow the UK to capitalise on Artificial Intelligence and data-driven healthcare and Prime Minister Johnson has promised to give their report “the detailed consideration it deserves”.

Only 12 countries, including Canada, Switzerland and New Zealand have positive adequacy decisions from the EU. The US regime was deemed partially adequate, but these decisions have been thrown out twice by the European court of justice. 

“The UK must also now move to complete the development of its own international data transfer regime in order to allow companies in the UK not just to exchange data with the EU, but also to be able to access opportunities across the world,” said Julian David, CEO of industry lobby group TechUK.

  Gov.UK:      Gov.UK:       BP Collins:      RTE:     CNBC:         Guardian

You Might Also Read:

The Effects Of GDPR On EU / US Relations:

 

« Cyber Insurance - Making The Ransomware Crisis Worse
CYRIN Have Created Some New Training Options »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Grid32

Grid32

Grid32 provides independent computer system and physical security audit services to government and corporate clients of all sizes.

SAMATE

SAMATE

The Software Assurance Metrics And Tool Evaluation project is an inter-agency project between the US Department of Homeland Security and NIST.

Forcepoint

Forcepoint

Forcepoint provide a unified, cloud-centric platform that safeguards users, networks and data while eliminating the inefficiencies of managing multiple point security products.

Slovak Security Policy Institute (SSPI)

Slovak Security Policy Institute (SSPI)

Slovak Security Policy Institute is an independent non-governmental organization that focuses on research and analysis of security challenges including defence and cyber security.

CERT NZ

CERT NZ

CERT NZ supports businesses, organisations and individuals affected by cyber security incidents, and provide trusted and authoritative information and advice.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Exein

Exein

Exein are on a mission to build the world’s first ecosystem for firmware security so that all different types of firmware are secure around the world.

FFRI Security

FFRI Security

FFRI is committed to research and development of preventing the most advanced cyber-attacks and breaches.

Mitre

Mitre

At Mitre we work across government to tackle challenges to the safety, stability, and well-being of our nation. Areas of expertise include Cybersecurity.

ChainSecurity

ChainSecurity

ChainSecurity provides products and services for securing smart contracts and blockchain protocols and conducts R&D in the areas of security, program analysis, and machine learning.

iSecurity Consulting

iSecurity Consulting

iSecurity delivers a complete lifecycle of digital protection services across the globe for public and private sector clients.

Secura B.V.

Secura B.V.

Secura is an independent specialized cybersecurity expert, providing insights to protect valuable assets and data.

GoVanguard

GoVanguard

GoVanguard is an boutique information security team delivering robust, business-focused information security solutions.

Innefu Labs

Innefu Labs

Innefu is an Information Security R&D startup, providing cutting edge Information Security & Data Analytics solutions.

Grindstone Ventures

Grindstone Ventures

Grindstone Ventures is a post-seed fund that supports post-seed equity and quasi-equity investments in early-stage innovation-driven and/or technology companies.

PCI Security Standards Council (PCI SSC)

PCI Security Standards Council (PCI SSC)

The PCI Security Standards Council is a global forum that brings together payments industry stakeholders to develop and drive adoption of data security standards and resources for safe payments.