Iubenda logo
Start generating


Table of Contents

UK-US Data Bridge: A New Era for Secure Data Transfers

The UK Secretary of State for Science, Innovation, and Technology, Rt Hon Michelle Donelan MP, has announced the establishment of the UK-US Data Bridge (the “Bridge”), a significant development in UK-US data transfers.

The Bridge, also known as the UK Extension to the EU-US Data Privacy Framework, ensures a seamless flow of personal data between the UK and the US while upholding the highest privacy standards.

Key Takeaways

  1. Decision Authority: The decision was taken under Section 17A of the Data Protection Act 2018.
  2. Adequacy Regulations: The regulations to make this decision effective were laid in Parliament on 21 September 2023, and were made active on the 12 October.
  3. Support from the US: The US Attorney General, as of 18 September, has recognized the UK as a ‘qualifying state‘, ensuring, among others, a protective redress mechanism for UK individuals.
  4. Historical Background: commitment to the establishment of the Bridge was anticipated by the UK’s Prime Minister and President Biden in the Atlantic Declaration.

Understanding Data Bridges

Think of a ‘data bridge‘ as a green light, the recognition that the level of data protection offered by the country of destination, the US in this specific case, is ‘adequate‘. In other words, data can safely flow to that country, without further measures being required, as it offers a sufficient level of protection, comparable to that of the UK. 

The establishment of the Bridge embodies the UK’s dedication to nurturing global ties. 

The Bridge is designed with the rigorous standards of UK GDPR at its heart and its benefits range from boosting business growth and pivotal research to spurring innovation and enhancing consumer services.

About the Data Privacy Framework

  • Administered by the US Department of Commerce, it’s an opt-in certification for US companies.
  • It replaces the former Privacy Shield and ensures strict data protection principles.
  • UK’s extension to the framework allows certified US entities to receive personal data collected from UK individuals.

🔒 Privacy Matters

The establishment of the Bridge stands as a testament to the unwavering commitment to UK GDPR standards. 

As US entities come under the Bridge, they are now required to adhere to UK GDPR’s stringent norms. While this bridge paves the way for more streamlined data transfers, UK companies remain tethered to domestic data protection regulations, guaranteeing unparalleled protection for individuals’ personal data.

This UK-US data bridge fosters a stronger relationship between the two nations while ensuring that individual privacy and data protection standards remain uncompromised. 

Stay ahead in the rapidly evolving digital privacy world by understanding and complying with the latest regulations. Whether you’re a startup or a leading brand, iubenda offers tailored solutions to meet your unique needs.

Start generating