# Transfers subject to appropriate safeguards 46(1) — GDPR — provision context

> Focused context for a single provision (46(1)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-46#par-1
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Transfers subject to appropriate safeguards** (GDPR, full article: https://overview.legal/laws/gdpr/art-46).

## Provision text

### 46(1)

In the absence of a decision pursuant to Article 45(3), a controller or processor may transfer personal data to a third country or an international organisation only if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available.


## Topics on this provision

- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Judgment of the Court (Fifth Chamber) of 26 January 2023.#Criminal proceedings against V.S.#Request for a preliminary ruling from the Spetsializiran nakazatelen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Directive (EU) 2016/680 – Article 4(1)(a) to (c) – Principles relating to processing of personal data – Purpose limitation – Data minimisation – Article 6(a) – Clear distinction between personal data of different categ** (case-law) — https://overview.legal/posts/132297
- **Data Protection Commissioner v. Facebook Ireland Ltd, and Maximillian Schrems** (case-law) — https://overview.legal/posts/6120
- **CJEU - C-205/21 - Ministerstvo na vatreshnite raboti** (case-law) — https://overview.legal/posts/158437
- **Data Protection Commissioner v. Facebook Ireland Ltd, and Maximillian Schrems** ¶137 (case-law, CJEU) — https://overview.legal/posts/6120
- **CJEU - C-205/21 - Ministerstvo na vatreshnite raboti** ¶22 (case-law, GDPRhub) — https://overview.legal/posts/158437
- **Judgment of the Court (Fifth Chamber) of 26 January 2023.#Criminal proceedings against V.S.#Request for a preliminary ruling from the Spetsializiran nakazatelen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Directive (EU) 2016/680 – Article 4(1)(a) to (c) – Principles relating to processing of personal data – Purpose limitation – Data minimisation – Article 6(a) – Clear distinction between personal data of different categ** ¶22 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132297
- **Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group** (guidance) — https://overview.legal/posts/125671
- **Onderwerp:** (guidance) — https://overview.legal/posts/50456
- **Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group** (guidance) — https://overview.legal/posts/125670
- **Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679** (guidance) — https://overview.legal/posts/38051
- **Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement** (guidance) — https://overview.legal/posts/38075
- **Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group** (guidance) — https://overview.legal/posts/125672

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-46#par-1 · 2026-08-22