Personal data can continue to be sent if UK maintains “adequate” data protection.