UK-US Data Privacy Framework extension becomes law

On 21Sep23 the U.K. Secretary of State for Science, Innovation and Technology Michelle Donelan laid regulations in the U.K. Parliament, giving effect to a U.K.-U.S. Data Bridge (another name for the UK-US Data Privacy Framework extension). The decision was based on a determination that the U.K.-U.S. Data Bridge “maintains high standards of privacy for U.K. personal data.”

This will replace Privacy Shield, which was deemed invalid over 2 years ago.

The UK-US Data Bridge includes a self-certification scheme to which US organisations need to sign up, and we expect to hear much more about this from the ICO in the coming days.

It is scheduled to become law on 12th October 2023.