In October 2023, the UK issued an adequacy decision on the EU-U.S. Data Privacy Framework (DPF), which established a UK Extension to the DPF. The extension automatically applies to organizations certified under the DPF, which means organizations subject to the UK GDPR can transfer personal data to organizations in the U.S. participating in the DPF without having to put in place additional data protection safeguards.