UK and US reach commitment in principle over ‘Data Bridge’

UK and US reach commitment in principle over ‘Data Bridge’

The United Kingdom and the United States have issued a joint statement announcing a commitment in principle to establish the UK Extension to the Data Privacy Framework, creating a ‘data bridge’ between the two countries. This exciting development aims to facilitate the free flow of personal data, benefiting businesses by reducing costs and increasing opportunities for international trade.

The joint statement made on 8 June 2023 began by saying:

“Prime Minister Rishi Sunak and President Joseph R. Biden announced that they have committed in principle to establish a data bridge allowing for the free flow of data between organisations in the United Kingdom and participating organisations in the United States.”

However, whilst this is a very welcome announcement, it feels like another ‘holding position’ statement with many caveats still in place and much still to work through.

• Subject to the UK’s data bridge assessment.
• Further technical work is being finalised.
• Dependent on the US designation of the UK as a qualifying state.

As the statement goes on to say, though, this is a key step that marks two years of progress and ‘mutual ambition’ for the data bridge to restore a ‘robust and reliable mechanism for UK-US data flows’.

Why is the Data Bridge needed?

The UK and the US have a robust economic relationship, with data-enabled services playing a vital role. In 2021, the UK exported more than £79 billion of data-enabled services to the US, representing a significant portion of the UK’s total data-enabled services exports. However, the current process involves burdensome red tape, requiring costly contract clauses to meet data protection and privacy standards. A data bridge would remove these barriers, streamlining processes, reducing costs, and enabling British businesses to operate and trade more efficiently internationally.

If finalised, the data bridge between the UK and the US would bring numerous benefits for organisations. Firstly, it would simplify the transfer of personal data, providing a secure and efficient avenue for data exchange. This ease of data flow would enhance collaboration between UK and US organisations, driving trans-Atlantic research and innovation. Moreover, the data bridge would offer greater certainty for organisations looking to share data with trans-Atlantic partners, fostering important collaborations that can facilitate life-saving research and encourage scientific breakthroughs across borders.

Establishing the data bridge aligns with the UK’s ambition to become a science and technology superpower. International collaboration is crucial for achieving this goal, and partnerships with countries like the United States open new avenues for innovation and economic growth. By strengthening the rights and safeguards of UK individuals and ensuring reliable data flows, the data bridge provides a foundation for businesses to access new markets and expand their global reach.

Less burden on the organisation transferring the data

The data bridge holds great promise for organisations involved in transferring data between the UK and the US. Once established, it would eliminate the need for costly and inefficient alternative transfer mechanisms, such as individual contractual clauses. This streamlined process would save businesses time and resources while ensuring compliance with data protection regulations. Additionally, by removing barriers to data flow, the data bridge would unlock new growth opportunities, allowing business owners to focus on their core operations and explore untapped markets.

And now for the Fly in the ointment

As a result of the Schrems judgement from the European Court of Justice, there is a growing trend with European Data Protection Authorities stating that transferring data to the USA is unlawful.

Any UK-US Data Bridge agreement which does not take this into account risks the removal of the Adequacy Decision issued to the UK by the EU.

This will mean that any saving in bureaucracy will simply be transferred to additional paperwork when dealing with the EU. More seriously, it may prevent EU companies from storing data in the UK in case it is then transferred to the USA.

UK and US reach commitment in principle over ‘Data Bridge’ – What should you do now?

While the UK and US commitment in principle has been announced, further technical work will be completed in the coming months before a final decision is made regarding establishing the data bridge. The UK government will carefully assess the protection provided for personal data, adherence to the rule of law, respect for human rights and fundamental freedoms, and the effectiveness of regulatory mechanisms.

Data controllers should stay informed about the progress of this initiative as it unfolds (keep your eye on our blog and emails), as it has the potential to transform the landscape of data transfers between the UK and the US.

In conclusion, the commitment in principle to establish a data bridge between the UK and the US marks an important milestone in facilitating data-enabled trade. By leveraging the benefits of the data bridge, UK businesses can strengthen their global presence and thrive in an increasingly interconnected digital world.

But for now . . . continue with those Contractual Clauses.

If you need any help or advice, please take advantage of your complimentary half-hour consultation with one of our data protection specialists.