UK adequacy lookup
Type a destination. If it is listed, a transfer within the scope shown needs no further safeguard. If it is not, use the transfer route finder: an IDTA or the UK Addendum with the data protection test, UK BCRs, or exceptionally an Art 49 derogation.
| Destination | Coverage | Basis | Group |
|---|---|---|---|
| Andorra | Full | DPA 2018 Sch 21 (EU decisions in force at the end of the transition period) | Carried over from EU decisions |
| Argentina | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Austria | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Belgium | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Bulgaria | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Canada Commercial organisations subject to PIPEDA only. | Partial | DPA 2018 Sch 21 | Carried over from EU decisions |
| Croatia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Cyprus | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Czechia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Denmark | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Estonia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| EU and EEA institutions, bodies, offices and agencies | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states and EU institutions) | EEA and Gibraltar |
| Faroe Islands | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Finland | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| France | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Germany | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Gibraltar | Full | DPA 2018 Sch 21 (transitional) | Carried over from EU decisions |
| Greece | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Guernsey | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Hungary | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Iceland | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Ireland | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Isle of Man | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Israel | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Italy | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Japan Private sector organisations only. | Partial | DPA 2018 Sch 21 | Carried over from EU decisions |
| Jersey | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Latvia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Liechtenstein | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Lithuania | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Luxembourg | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Malta | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Netherlands | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| New Zealand | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| Norway | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Poland | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Portugal | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Republic of Korea The UK's first adequacy regulations of its own, made after 2020-12-31. | Full | Data Protection (Adequacy) (Republic of Korea) Regulations 2022 | UK regulations |
| Romania | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Slovakia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Slovenia | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Spain | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Sweden | Full | DPA 2018 Sch 21 (transitional adequacy for EEA states) | EEA and Gibraltar |
| Switzerland | Full | DPA 2018 Sch 21 | Carried over from EU decisions |
| United States Only US organisations certified to the Data Privacy Framework that have opted into the UK Extension. | Partial | Data Protection (Adequacy) (United States of America) Regulations 2023 | UK regulations |
| Uruguay | Full | DPA 2018 Sch 21 | Carried over from EU decisions |