# Transfers on the basis of an adequacy decision 45(a) — GDPR — provision context

> Focused context for a single provision (45(a)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-45#par-2-pnt-a
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Transfers on the basis of an adequacy decision** (GDPR, full article: https://overview.legal/laws/gdpr/art-45).

## Provision text

### 45(a)

the rule of law, respect for human rights and fundamental freedoms, relevant legislation, both general and sectoral, including concerning public security, defence, national security and criminal law and the access of public authorities to personal data, as well as the implementation of such legislation, data protection rules, professional rules and security measures, including rules for the onward transfer of personal data to another third country or international organisation which are complied with in that country or international organisation, case-law, as well as effective and enforceable data subject rights and effective administrative and judicial redress for the data subjects whose personal data are being transferred;


## Topics on this provision

- **Security** — https://overview.legal/topics/beveiliging
  Technical and organizational measures to protect personal data
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons

## Cited by (exact-provision citations)

- **Data Protection Commissioner v. Facebook Ireland Ltd, and Maximillian Schrems** (case-law) — https://overview.legal/posts/6121
- **Judgment of the General Court (Tenth Chamber, Extended Composition) of 3 September 2025.#Philippe Latombe v European Commission.#Transfer of personal data to the United States – Commission Implementing Decision on the adequate level of protection of personal data ensured by the United States – Right to an effective remedy – Right to private and family life – Decisions based solely on the automated processing of personal data – Security of the processing of personal data.#Case T-553/23.** (case-law) — https://overview.legal/posts/132137
- **Data Protection Commissioner v. Facebook Ireland Ltd, and Maximillian Schrems** ¶181 (case-law, CJEU) — https://overview.legal/posts/6121
- **Judgment of the General Court (Tenth Chamber, Extended Composition) of 3 September 2025.#Philippe Latombe v European Commission.#Transfer of personal data to the United States – Commission Implementing Decision on the adequate level of protection of personal data ensured by the United States – Right to an effective remedy – Right to private and family life – Decisions based solely on the automated processing of personal data – Security of the processing of personal data.#Case T-553/23.** ¶195 (case-law, General Court) — https://overview.legal/posts/132137
- **Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)** (guidance) — https://overview.legal/posts/125715
- **Recommendations 02/2020 on the European Essential Guarantees for surveillance measures** (guidance) — https://overview.legal/posts/126117

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-45#par-2-pnt-a · 2026-08-22