EU-UK Vehicle Registration Data: What Changes for Fleets and Transport

Key data

EU Member States now have the green light to transmit personal vehicle registration data to the United Kingdom. The Council Decision (EU) 2026/1069, of 12 May 2026, sets the specific date from which this exchange is legally possible, closing a pending chapter since Brexit in terms of police cooperation and road safety.

The EU-UK Trade and Cooperation Agreement already contemplated this mechanism in its article 537, but article 540.2 of the same Agreement required a formal prior decision by the Council before Member States could initiate transmission. That decision is precisely what is being published now.

What does this regulation establish?

The Decision sets the EU's position vis-à-vis the United Kingdom regarding the start of vehicle registration data exchange. In practical terms, it establishes two fundamental things:

• The specific date from which Member States are enabled to transmit personal registration data to the United Kingdom.
• The legal framework under which such transfer is supported: the EU-UK Trade and Cooperation Agreement, without prejudice to GDPR compliance by the entities involved.

Before this Decision, the exchange of this data was not possible even though the Agreement contemplated it, because the formal enabling act required by article 540.2 was missing. This Decision covers that procedural requirement.

The data affected are personal data relating to vehicle registrations as defined in article 537 of the Agreement. Their transmission is primarily intended for the traffic, police and road safety authorities of the United Kingdom.

Economic and operational impact

The most immediate impact is not economic in the strict sense, but operational and regulatory compliance. The concrete consequences are:

• Greater cross-border traceability: Vehicles registered in the EU that circulate in the United Kingdom (and vice versa) can be identified more easily by the competent authorities of both parties.
• Adaptation of internal procedures: Traffic and police authorities in Member States must review and update their data transfer protocols to comply with the requirements of the Agreement and GDPR simultaneously.
• Impact on cross-border fleets: Transport and logistics companies operating between the EU and the United Kingdom will see their vehicles subject to a more integrated identification system between both jurisdictions.
• Risk of GDPR non-compliance: Although the transfer is supported by the Agreement, entities participating in the exchange must ensure compliance with the General Data Protection Regulation. Failure to do so may result in administrative penalties.

Who does it affect?

This Decision has direct and indirect impact on the following profiles:

• Traffic authorities of the 27 EU Member States: Must adapt their data transfer procedures to enable sending to the United Kingdom.
• Police and road safety authorities of the EU and the United Kingdom: They are the main recipients and senders of vehicle registration data exchange.
• Transport and logistics companies with EU-UK operations: Their vehicles are subject to greater traceability. They must review their privacy policies and data processing if they manage fleets registered in the EU.
• Cross-border corporate fleet managers: Any company with vehicles registered in the EU that regularly operate in the United Kingdom must be aware of this change and assess its impact on document management.
• Data Protection Officers (DPO) of public bodies: Must ensure that transfer procedures comply with GDPR, even when the legal basis is the EU-UK Agreement.

Practical example

A Spanish freight transport company operates a fleet of 80 vehicles registered in Spain, of which 25 carry out regular routes between Spain and the United Kingdom. Until now, if one of that fleet's vehicles was subject to a traffic violation in the United Kingdom, British authorities had difficulty accessing Spanish registration data in an automated manner.

From the date set by Decision (EU) 2026/1069, Spanish traffic authorities will be able to legally transmit that data to the United Kingdom when requested. This means that:

• Traffic violations committed in the United Kingdom by EU vehicles will be more easily identifiable and prosecutable.
• The fleet manager must ensure that their privacy policy informs drivers of this possibility of international data transfer.
• The company's DPO must review that the processing of registration data complies with GDPR, given that there is now a new channel for transfer to a third country (the United Kingdom, after Brexit).

What should companies do now?

1. Identify if your company has vehicles registered in the EU that operate in the United Kingdom: If so, this regulation directly affects you and you must act.
2. Review the privacy policy and records of processing activities: Include the possibility of transferring registration data to the United Kingdom as a new purpose or recipient, if applicable.
3. Consult with the DPO or data protection advisor: Verify that the processing of fleet registration data complies with GDPR under the new framework enabled by the EU-UK Agreement.
4. Inform affected drivers: If registration data can be transmitted to the United Kingdom, the data subjects must be informed in accordance with articles 13 or 14 of GDPR.
5. Monitor the exact date of entry into force: The Decision does not publicly specify the start date in the available data. Consult the official text in the EU Official Journal to know the exact moment from which it applies.