European Parliament says UK does not meet GDPR adequacy requirements

In its non-legislative Resolution on the proposed mandate for negotiations for a new partnership with the UK, the European Parliament has stated it considers that the UK data protection regime does not currently meet the adequacy requirements needed for it to benefit from an adequacy decision for data export purposes.  The EP expresses concerns that under the exemption in the DPA18 relating to the processing of personal data of immigrants, the personal data of non-UK citizens will not be afforded the same protections as that of UK citizens. It also considers that the data retention provisions for telecommunications data and rules on access to data by law enforcement agencies do not currently comply with the GDPR.  The EP urges the Commission to “carefully assess the UK’s data protection legal framework and ensure the UK has resolved the problems identified in this resolution prior to considering UK data protection law adequate in line with EU law as interpreted by the CJEU”.  See European Parliament resolution of 12 February 2020 on the proposed mandate for negotiations for a new partnership with the United Kingdom of Great Britain and Northern Ireland (2020/2557(RSP))  Data Protection section paragraphs 32-35

https://www.europarl.europa.eu/doceo/document/TA-9-2020-0033_EN.html