What action you need to take regarding data protection and data flows with the EU/EEA. This information is for UK businesses and other organisations that receive and transfer personal data to/from organisations abroad, including the European Economic Area (EEA), which includes the EU or operate in the EEA.