BrowseStatutory InstrumentsSI 2023/1028
SIin_forceSI 2023/1028 · regulation

The Data Protection (Adequacy) (United States of America) Regulations 2023

These Regulations specify the United States of America as a country which provides an adequate level of protection of personal data for certain transfers for the purposes of Part 2 of the Data Protection Act 2018 (“the 2018 Act”) and the UK GDPR (defined in section 3 of the 2018 Act). This means that personal data which will be in the scope of the EU-US Data Privacy Framework Principles can be transferred to persons in the United States of America who participate in the UK Extension to the EU-US Data Privacy Framework without the need for any specific authorisation. “Personal data” is defined in Article 4(1) of the UK GDPR and has the same meaning in Part 2 of the 2018 Act by virtue of section 5 of that Act.

Sign in to trackLast fetched 30 Apr 2026 · legislation.gov.uk
Lifecycle
Department
Made
20 Sept 2023
In force
12 Oct 2023