The European Commission recalled on Thursday 26 August that the decision on the adequacy of personal data protection regimes between the EU and UK systems could be “suspended, amended, or revoked at any time”.
The statements come after the UK’s Digital Minister Oliver Dowden said earlier today that the UK was considering reforming its digital sector legislation and moving away from the EU’s cookie rules by removing consent boxes from users’ screens.
Such a decision would see UK legislation differ from the General Data Protection Regulation (GDPR) in force in the EU.
“This can be done in cases of justified urgency. The Commission will continue to ensure that we are protected when we cross the Channel by very effective measures. The message is clear”, added the European Commission, adding that it was closely monitoring the evolution of the legislation in the UK.
In February, the European Commission proposed that the EU should recognise for a period of 4 years that UK law provides an adequate level of protection when EU citizens’ personal data is transferred to the UK (see EUROPE 12662/2). This was done at the end of June (see EUROPE 12750/8).
At the end of May, the European Parliament narrowly adopted a resolution asking it to reconsider the draft adequacy decision (see EUROPE 12724/16). (Original version in French by Thomas Mangin)