> I think the European Commission did indicate that the UK was an Adequate Country? Every so often I see something like this: https://www.mayerbrown.com/en/pe

> I think the European Commission did indicate that the UK was an Adequate Country? Every so often I see something like this: https://www.mayerbrown.com/en/perspectives-events/publications/2023/03/uk-government-proposes-key-changes-to-the-uk-gdpr https://www.mayerbrown.com/en/perspectives-events/publicatio... I suspect the UK is planning a number of changes that may change this, so even though I'm British, for the avoidance of doubt I prefer companies actually hosted in the EU and that will agree to conduct business in Europe (and thus under EU courts, rather than GB ones). > 3. On the Data Protection Officer, I think one is only needed if sensitive data on a large scale is processed. You are totally incorrect about that. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-officers/ https://ico.org.uk/for-organisations/guide-to-data-protectio...