If the data goes back to the US, then this is a GDPR fail regardless...
...but then UK is going to re-word GDPR to 'restore balance'.
British competition regulators have accepted promises by Google that its cookie-killing Privacy Sandbox project won't shut other adtech companies out of the market. In a statement this morning the Competition and Markets Authority (CMA) said it had intervened "over concerns that the proposals would cause online advertising …
"While today's announcement shows British regulators flexing their muscles at Google has worked for now, questions remain over whether Privacy Sandbox will truly reduce the amount of data collected by advertising companies. "
How does it show that British regulators flexing their muscles at Google has worked?
What you report states that the ICO are accepting with Google's statements - it is just as likely that the ICO are accepting of this because they have been cut in for a peice of the action themselves....
Big Brother really is watching