# Processor 28(8) — GDPR — provision context

> Focused context for a single provision (28(8)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-28#par-8
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Processor** (GDPR, full article: https://overview.legal/laws/gdpr/art-28).

## Provision text

### 28(8)

A supervisory authority may adopt standard contractual clauses for the matters referred to in paragraph 3 and 4 of this Article and in accordance with the consistency mechanism referred to in Article 63.


## Topics on this provision

- **International Transfer** — https://overview.legal/topics/internationale-doorgifte
  Transfer of personal data outside the EU/EEA
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **EDPB Annual Report 2019** (guidance) — https://overview.legal/posts/126163
- **EDPB Work Programme 2019-2020** (guidance) — https://overview.legal/posts/126246
- **Guidelines 07/2020 on the concepts of controller and processor in the GDPR** (guidance) — https://overview.legal/posts/38069
- **Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)** (guidance) — https://overview.legal/posts/125715
- **EDPB Annual Report 2021** (guidance) — https://overview.legal/posts/125941
- **Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data** (guidance) — https://overview.legal/posts/126015
- **Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126032
- **EDPB-EDPS Joint Opinion 1/2021 on standard contractual clauses between controllers and processors** (guidance) — https://overview.legal/posts/126081
- **Opinion 17/2020 on the draft Standard Contractual Clauses submitted by the SI SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126161
- **Contribution of the EDPB to the evaluation of the GDPR under Article 97** (guidance) — https://overview.legal/posts/126182
- **Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126212
- **Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)** §5 (guidance, EDPB) — https://overview.legal/posts/126212

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-28#par-8 · 2026-08-22