Watchtower/Law library/Data Protection (Adequacy) (United States of...
As last captured

legislation

Data Protection (Adequacy) (United States of America) Regulations 2023

Data Protection (Adequacy) (United States of America) Regulations 2023 recognises an adequate level of protection under reg. 3 for personal data transfers to United States entities participating in the UK Extension.

Verified at publication, 2026-11-12 11:44 UTC

4 provisions in 1 parts · official text ↗

trbfpseuipsvmemccm
impact by vertical

Summary

What this law does

The Regulations specify that the United States of America provides an adequate level of protection for personal data transfers under the UK GDPR and the Data Protection Act 2018, specifically for transfers to recipients participating in the UK Extension to the EU-US Data Privacy Framework.

Why it matters to Signicat and its customers

No Signicat-specific relevance narrative is stored for this instrument; the stored applicability is shown below.

Who is bound: not stated · Regulators: Federal Trade Commission; Department of Transportation

Key obligations each linked to the provision it comes from

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (6)

synthesis coverage: missing/unverified L2 main

synthesis coverage: missing evaluation uk:uksi/2023/1028#regulation-1

synthesis coverage: missing evaluation uk:uksi/2023/1028#regulation-2

synthesis coverage: missing evaluation uk:uksi/2023/1028#regulation-3

synthesis coverage: missing evaluation uk:uksi/2023/1028#regulation-4

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

No captured pending effects.

Full TOC · table of contents Expand all parts

1 parts · 4 provisions. Open a provision for its text and, where available, its one-line summary.

· 4 provisions
1 Citation, commencement and extent
2 Interpretation
3 Adequate level of protection
4 Independent supervisory authorities

Impact profile

Transportation
1
Banking finance
1
Public sector health
1
Energy, utilities & telco
1
Insurance pensions
1
Services
1
Media entertainment
1
Manufacturing construction
1
Commerce
1

Dimensions

Mechanism strength
0
Signicat obligation
0
Urgency
Pending

Penalties

not supplied

Definitions

Data Privacy Framework List
“the list of that name, as it has effect from time to time, which is maintained and made publicly available by the United States Department of Commerce”
reg. 2
EU-US Data Privacy Framework
“the programme of that name administered by the United States Department of Commerce”
reg. 2
EU-US Data Privacy Framework Principles
“the principles and supplemental principles issued by the United States Department of Commerce under the EU-US Data Privacy Framework as they apply to transfers of personal data from the United Kingdom under the UK Extension to the EU-US Data Privacy Framework”
reg. 2
UK Extension to the EU-US Data Privacy Framework
“the extension to the EU-US Data Privacy Framework which the United States Department of Commerce administers in relation to transfers of personal data from the United Kingdom”
reg. 2

References

No captured related instruments.