Last updated: June 7, 2021

Q: Can a Privacy Shield participant rely on the EU-U.S. Privacy Shield Framework to receive personal data from the United Kingdom in light of the UK’s withdrawal from the EU?

On January 1, 2021, the United Kingdom (UK) finalized its exit from the European Union. The UK allows for the transfer of personal data to countries outside the UK only if the transfer is consistent with a UK adequacy decision or is permitted under a safeguard or exception provided under UK law.  As of this time, the UK has not adopted an adequacy decision for the United States or for the EU-U.S. Privacy Shield Framework.  For help determining options for the transfer of personal data from the UK to the United States, please contact the UK’s Information Commissioner’s Office or legal counsel.