{
  "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023",
  "json_url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023.json",
  "id": "uksi/2023/1028",
  "title": "The Data Protection (Adequacy) (United States of America) Regulations 2023",
  "short_title": "Data Protection (Adequacy) (United States of America) 2023",
  "long_title": "These Regulations specify the United States of America as a country which provides an adequate level of protection of personal data for certain transfers for the purposes of Part 2 of the Data Protection Act 2018 (“the 2018 Act”) and the UK GDPR (defined in section 3 of the 2018 Act). This means that personal data which will be in the scope of the EU-US Data Privacy Framework Principles can be transferred to persons in the United States of America who participate in the UK Extension to the EU-US Data Privacy Framework without the need for any specific authorisation. “Personal data” is defined in Article 4(1) of the UK GDPR and has the same meaning in Part 2 of the 2018 Act by virtue of section 5 of that Act.",
  "citation": "S.I. 2023/1028",
  "type": "uksi",
  "year": "2023",
  "number": "1028",
  "version": "current",
  "date": "2023-09-20",
  "revised": false,
  "valid_from": null,
  "extent": null,
  "unapplied_effects": 0,
  "provisions": [
    {
      "path": "introduction",
      "kind": "introduction",
      "number": null,
      "heading": "Introductory text",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/introduction",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "regulation/1",
      "kind": "regulation",
      "number": "1",
      "heading": "Citation, commencement and extent",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/regulation-1",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "regulation/2",
      "kind": "regulation",
      "number": "2",
      "heading": "Interpretation",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/regulation-2",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "regulation/3",
      "kind": "regulation",
      "number": "3",
      "heading": "Adequate level of protection",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/regulation-3",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "regulation/4",
      "kind": "regulation",
      "number": "4",
      "heading": "Independent supervisory authorities",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/regulation-4",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "signature",
      "kind": "signature",
      "number": null,
      "heading": "Signature",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/signature",
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "note",
      "kind": "note",
      "number": null,
      "heading": "Explanatory note",
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/note",
      "extent": null,
      "status": null,
      "parent": null
    }
  ],
  "has_text": true,
  "pdfs": [
    {
      "title": "Printed copy",
      "main": true,
      "language": null,
      "date": "2023-09-21",
      "size": 191841,
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/pdf/uksi_20231028_en.pdf",
      "source_url": "https://www.legislation.gov.uk/uksi/2023/1028/pdfs/uksi_20231028_en.pdf"
    },
    {
      "title": "Revised UK Explanatory Memorandum",
      "main": false,
      "language": null,
      "date": "2023-11-22",
      "size": 74003,
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/pdf/uksiem_20231028_en_002.pdf",
      "source_url": "https://www.legislation.gov.uk/uksi/2023/1028/pdfs/uksiem_20231028_en_002.pdf"
    },
    {
      "title": "UK Explanatory Memorandum",
      "main": false,
      "language": null,
      "date": "2023-09-21",
      "size": 52577,
      "url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/pdf/uksiem_20231028_en_001.pdf",
      "source_url": "https://www.legislation.gov.uk/uksi/2023/1028/pdfs/uksiem_20231028_en_001.pdf"
    }
  ],
  "outstanding_effects": [],
  "made_under": [
    {
      "id": "ukpga/2018/12",
      "title": "Data Protection Act 2018",
      "url": "https://openlegislation.uk/data-protection-act-2018",
      "provisions": [
        "section/17A"
      ]
    }
  ],
  "changes_made_to": 0,
  "changes_made_to_url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/changes.json",
  "changes_made_by": 0,
  "changes_made_by_url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/changes/by-it.json",
  "instruments_made_under": 0,
  "instruments_made_under_url": "https://openlegislation.uk/data-protection-adequacy-united-states-of-america-regulations-2023/instruments.json",
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2023/1028",
    "retrieved_at": "2026-10-28T21:40:23.480567+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}