EU upholds 11 adequacy decisions

Decisions of adequacy need to be reviewed regularly, and the EU has just upheld 11 decisions with the comment that these countries have brought their data protection regulations even more into line with the EU GDPR.

The reviews confirmed that data protection standards in Andorra, Argentina, Canada, the Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay are adequate under the EU GDPR.

Of course, the UK government will need to adopt the same procedure at some point, but we would hope that the results are the same.

Reviews of adequacy decisions for Japan, South Korea and the UK were not included, so these are to follow, and the EU mentioned working with Argentina and Israel to move towards being able to issue an adequacy decision in the future.

No mentioned was made of the US, as it seems likely that the EU-US Data Privacy Framework may be challenged in court. Furthermore, the EU is likely to review adequacy for the UK once the Data Protection and Digital Information Bill becomes law, probably in this Spring of 2024.