The court confirmed that retaining data on settled payment defaults for defined periods may be lawful where it supports legitimate economic interests and reliable risk evaluation.
The extension of the EU-UK adequacy decision to allow the free flow of personal data between the European Economic Area and the UK has received the green light from the European Commission.