This chapter delves into data protection, which is considered a cross-cutting issue and relevant for bilateral economic and security relations. It examines the ad hoc transitional solution set in the Trade and Cooperation Agreement (TCA) that secures the continuing transfer of data between the UK and the EU. It also assesses the Commission adequacy decision that is designed to regulate commercial data transfers from June 2021 onwards. The chapter discusses the fate of the new EU-UK data protection framework, which is dependent on action by the EU Court of Justice (ECJ). It aims to reconstruct how the UK data protection framework has evolved in the last four years, from the time of the Brexit referendum to the conclusion of the TCA.