In general, the Commission is examining whether a country outside the EU offers an adequate level of data protection. National (general and sectoral) law, international obligations, existing and functional obligations The supervisory authority (The Office of the Information Commissioner, ICO) will be reviewed. The UK Government believes that a “adequacy decision” should be easy to obtain, given that the RGPD is introduced into UK local law and the UK, as a former EU member state, has a long tradition of protecting personal data. According to the government, the UK data protection framework will be fully aligned with the RGPD when it leaves the EU. However, there are several challenges to be met:  European Commission (2018): annex to the Council`s proposed decision on the signing of the agreement on the withdrawal of the United Kingdom from Great Britain and Northern Ireland from the European Union and the European Atomic Energy Community ec.europa.eu/commission/sites/beta-political/files/annex_to_the_proposal_for_a_council_decision.pdf This triggered Article 50 of the Treaty on European Union, which defines the procedure for withdrawing an EU Member State, which represents a two-year countdown.  European Commission (2017): Joint report by EU and UK government negotiators on progress in the first phase of negotiations, in line with Article 50 of the TUE on the UK`s orderly withdrawal from the EU. ec.europa.eu/commission/sites/beta-political/files/joint_report.pdf While the UK is currently part of the EU, it is considered appropriate and the data can be transmitted freely in both directions (between the UK and other EEA Member States). As a result of Brexit, the UK could soon be seen as inappropriate, i.e. as a “third country” (until 23:00 UK time on 29 March 2019, unless a withdrawal agreement between the EU and the UK sets a different date). This has an impact on the transfer of personal data between the UK and the other EEA Member States; Since the UK is subject to Article 45 of the RGPD, data transmission is only permitted if the UK, as a country outside the EEA, meets one of the following conditions: the UK has launched the formal withdrawal negotiation process by formally informing the European Council of its intention to leave the EU. The EU and the UK have reached an agreement on the withdrawal agreement with a revised protocol on Ireland and Northern Ireland (abolition of the “backstop”) and a revised political declaration. On the same day, the European Council (Article 50) approved these texts.
The adoption by the European Commission of a decision on adequacy with regard to the United Kingdom would ensure a comprehensive and clear agreement allowing the transfer of personal data from the EU to the UK. The European Commission has already adopted a a suitability decision for several countries under the 1995 directive and adequacy discussions are under way with Japan and South Korea. Note that the adequacy procedure can only be officially initiated when the UK becomes a third country and the procedure lasts an average of 28 months and can be revoked at any time. On 23 March 2018, EU and UK negotiators reached an agreement on the draft withdrawal agreement allowing the European Council (Article 50) to adopt guidelines for the framework for future eu-UK relations.  Attorney General (2018): Legal impact of the protocol on Ireland and Northern Ireland static.rasset.ie/documents/news/2018/12/05-december-eu-exit-attorney-general-s-legal-advice-to-cabinet-on-the-withdrawal-agreement-and-the-protocol-on-ireland-northern-ireland.pdf  European Commission (2018). Draft agreement on the UK`s withdrawal from the EU (colour version) 16-19 March 2018 ec.europa.eu/commission/sites/beta-political/files/draft_agreement_coloured.pdf a Brexit (vagy brexit) nemzetk-izileg elterjedt elnevezés az Egyes-l Kirélys-gé kilpes azére Eurrepai Uni-b-l.  Két angol szé `szevonsa: British (magyarul `brit`) – exit (`t`voz`s`il`il`il`s`).).