The EU Commission has published two draft adequacy decisions for transfers of personal data to the UK, one under the GDPR and the other for the Law Enforcement Directive. This will be welcome news to many UK and EU businesses grappling with the implications of Brexit – although, as we discuss in our briefing, there are still a few more stages to the process before formal adoption and the possibility of challenges further down the line once the decisions are adopted.