Skip to main content

Data Protection

Question for Department for Digital, Culture, Media and Sport

UIN HL17042, tabled on 9 July 2019

To ask Her Majesty's Government what factors they will take into account when making data adequacy decisions after Brexit.

Answered on

19 July 2019

The European Commission has so far made a full finding of adequacy in respect of: Andorra, Argentina, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay. The Commission has made partial findings of adequacy in respect of Japan, Canada and the USA. You can find more information about these decisions on the Information Commissioner’s website.

When the UK leaves the EU the power to make adequacy decisions will be repatriated to the Secretary of State. In February 2019 Parliament passed a Statutory Instrument (SI) setting out the criteria and process. The SI recognises and effectively rolls over all existing adequacy decisions that have been made by the EU as well as recognising EU states themselves as adequate. The SI also replicates the EU adequacy regime in UK law with a number of technical changes to make it work properly. The factors that the Secretary of State would need to take into account in reaching an adequacy decision include the rule of law, respect for human rights, and other relevant legislation in the third country being assessed.