The Commission adopted two adequacy decisions for the United Kingdom – one under the General Data Protection Regulation (GDPR) and the other for the Law Enforcement Directive. Personal data can now flow freely from the European Union to the United Kingdom, where it benefits from an essentially equivalent level of protection to that guaranteed under EU law. Both adequacy decisions include strong safeguards in case of future divergences, such as a “sunset clause”, limiting the duration of adequacy to four years.