Access to European Union law
<a href="https://eur-lex.europa.eu/content/help/eurlex-content/experimental-features.html" target="_blank">More about the experimental features corner</a>
Choose the experimental features you want to try
EUR-Lex
Access to European Union law

This document is an excerpt from the EUR-Lex website

You are here
Use quotation marks to search for an "exact phrase". Append an asterisk (*) to a search term to find variations of it (transp*, 32019R*). Use a question mark (?) instead of a single character in your search term to find variations of it (ca?e finds case, cane, care).
Search tips
Need more search options? Use the Advanced search

Document 02021D1773-20251223

Consolidated text: Commission Implementing Decision (EU) 2021/1773 of 28 June 2021 pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021) 4801)

Access initial legal act
(

Legal status of the document In force

)

ELI: http://data.europa.eu/eli/dec_impl/2021/1773/2025-12-23

02021D1773 — EN — 23.12.2025 — 002.001

This text is meant purely as a documentation tool and has no legal effect. The Union's institutions do not assume any liability for its contents. The authentic versions of the relevant acts, including their preambles, are those published in the Official Journal of the European Union and available in EUR-Lex. Those official texts are directly accessible through the links embedded in this document

►B

COMMISSION IMPLEMENTING DECISION (EU) 2021/1773

of 28 June 2021

pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom

(notified under document C(2021) 4801)

(OJ L 360 11.10.2021, p. 69)

Amended by:

 

 

Official Journal

  No

page

date

 M1

COMMISSION IMPLEMENTING DECISION (EU) 2025/1225 of 24 June 2025

  L 1225

1

26.6.2025

►M2

COMMISSION IMPLEMENTING DECISION (EU) 2025/2571 of 19 December 2025

  L 2571

1

23.12.2025



▼B

COMMISSION IMPLEMENTING DECISION (EU) 2021/1773

of 28 June 2021

pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom

(notified under document C(2021) 4801)



Article 1

For the purposes of Article 36 of Directive (EU) 2016/680, the United Kingdom ensures an adequate level of protection for personal data transferred from the European Union to United Kingdom public authorities responsible for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties.

Article 2

Whenever the competent supervisory authorities in Member States, in order to protect individuals with regard to the processing of their personal data, exercise their powers pursuant to Article 47 of Directive (EU) 2016/680 with respect to data transfers to public authorities in the United Kingdom within the scope of application set out in Article 1, the Member State concerned shall inform the Commission without delay.

Article 3

1.  
The Commission shall continuously monitor the application of the legal framework upon which this Decision is based, including the conditions under which onward transfers are carried out and individual rights are exercised, with a view to assessing whether the United Kingdom continues to ensure an adequate level of protection within the meaning of Article 1.
2.  
The Member States and the Commission shall inform each other of cases where the Information Commissioner, or any other competent United Kingdom authority, fails to ensure compliance with the legal framework upon which this Decision is based.
3.  
The Member States and the Commission shall inform each other of any indications that interferences by United Kingdom public authorities with the right of individuals to the protection of their personal data go beyond what is strictly necessary, or that there is no effective legal protection against such interferences.
4.  
Where the Commission has indications that an adequate level of protection is no longer ensured, the Commission shall inform the competent United Kingdom authorities and may suspend, repeal or amend this Decision.
5.  
The Commission may suspend, repeal or amend this Decision if the lack of cooperation of the government of the United Kingdom prevents the Commission from determining whether the finding in Article 1 is affected.

▼M2

Article 4

This Decision shall expire on 27 December 2031, unless extended in accordance with the procedure referred to in Article 58(2) of Directive (EU) 2016/680.

▼B

Article 5

This Decision is addressed to the Member States.

Top