{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2021/1772 — Decision — Adequate protection of personal data by the United Kingdom [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3","title":"Article 3","family":"l2_unit_view","work_id":"spaces/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom","view_of":"/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Consolidated version of 23 December 2025","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02021D1772-20251223","valid_from":"2021-06-28","valid_until":null,"content_id":"fe1592aec145bff1","versions":["2021-06-28"],"version_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3/versions/2026-10-26/rev/fe1592aec145bff1","versions_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3/versions","relations_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/3/relations","act_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom#art-3","source_line":"Commission Implementing Decision (EU) 2021/1772 · binding on its addressees · dated 28 Jun 2021 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_decision","legal_nature":"binding_adopted","addressees":["the Member States"],"dates":{"document_date":"2021-06-28","entry_into_force":"2021-06-28","locators":{"document_date":"CELLAR 32021D1772 work_date_document","entry_into_force":"CELLAR 32021D1772 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom","path":"/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom","name":"Commission Implementing Decision (EU) 2021/1772","number":"2021/1772","celex":"32021D1772","title_official":"COMMISSION IMPLEMENTING REGULATION (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021)4800) (Text with EEA relevance)","document_date":"2021-06-28"},"position":{"kind":"article","key":"3","index":3,"articles":5,"annexes":0},"prev":{"path":"/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/2","key":"2","title":"Article 2"},"next":{"path":"/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/articles/4","key":"4","title":"Article 4"},"act_anchor":"#art-3"}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02021D1772-20251223","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom.md","unit_text_sha256":"a60dac85290383b8607d02794303632016a5774ef50bf20ac0ba33796790a312","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"spaces/gdpr/level-2/implementing-acts/2021-1772-adequate-protection-of-personal-data-by-the-united-kingdom/art-3","kind":"article","key":"3","heading":"Article 3","text":"## <a id=\"art-3\"></a>Article 3\n\n1. <a id=\"art-3-p-1\"></a>The Commission shall continuously monitor the application of the legal framework upon which this Decision is based, including the conditions under which onward transfers are carried out, individual rights are exercised and United Kingdom public authorities have access to data transferred on the basis of this Decision, with a view to assessing whether the United Kingdom continues to ensure an adequate level of protection within the meaning of Article 1.\n\n2. <a id=\"art-3-p-2\"></a>The Member States and the Commission shall inform each other of cases where the Information Commissioner, or any other competent United Kingdom authority, fails to ensure compliance with the legal framework upon which this Decision is based.\n\n3. <a id=\"art-3-p-3\"></a>The Member States and the Commission shall inform each other of any indications that interferences by United Kingdom public authorities with the right of individuals to the protection of their personal data go beyond what is strictly necessary, or that there is no effective legal protection against such interferences.\n\n4. <a id=\"art-3-p-4\"></a>Where the Commission has indications that an adequate level of protection is no longer ensured, the Commission shall inform the competent United Kingdom authorities and may suspend, repeal or amend this Decision.\n\n5. <a id=\"art-3-p-5\"></a>The Commission may suspend, repeal or amend this Decision if the lack of cooperation of the United Kingdom government prevents the Commission from determining whether the finding in Article 1(1) is affected.\n\n","marks":[],"text_hash":"a60dac85290383b8607d02794303632016a5774ef50bf20ac0ba33796790a312","revision":1}}