# Transfers subject to appropriate safeguards 46(f) — GDPR — provision context

> Focused context for a single provision (46(f)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-46#par-2-pnt-f
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Transfers subject to appropriate safeguards** (GDPR, full article: https://overview.legal/laws/gdpr/art-46).

## Provision text

### 46(f)

an approved certification mechanism pursuant to Article 42 together with binding and enforceable commitments of the controller or processor in the third country to apply the appropriate safeguards, including as regards data subjects' rights.


## Topics on this provision

- **Codes of Conduct** — https://overview.legal/topics/codes-of-conduct
  Industry codes of conduct for data protection
- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Certification** — https://overview.legal/topics/certification
  Data protection certification mechanisms
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Opinion 26/2024 on the draft decision of the DE Bremen Supervisory Authority regarding the “Catalogue of Criteria for the Certification of IT-supported processing of Personal Data pursuant to art 42 GDPR (‘GDPR – information privacy standard’)” presented** (guidance) — https://overview.legal/posts/125701
- **Information Note on the Data Privacy Framework redress mechanism for national security purposes** (guidance) — https://overview.legal/posts/125754
- **Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria** (guidance) — https://overview.legal/posts/51080
- **Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)** (guidance) — https://overview.legal/posts/125702
- **Opinion 18/2024 on the draft decision of the Austrian Supervisory Authority regarding DSGVO-zt GmbH certification criteria** (guidance) — https://overview.legal/posts/125721
- **Opinion 19/2024 on the EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)** (guidance) — https://overview.legal/posts/125722
- **Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria** (guidance) — https://overview.legal/posts/51416
- **Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH** (guidance) — https://overview.legal/posts/51079
- **Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”** (guidance) — https://overview.legal/posts/50756
- **Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR** (guidance) — https://overview.legal/posts/125682
- **Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR** (guidance) — https://overview.legal/posts/125681
- **EDPB Annual Report 2023** (guidance) — https://overview.legal/posts/125756

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-46#par-2-pnt-f · 2026-08-22