Controllers that are part of a group of undertakings or institutions affiliated to a central body may have a legitimate interest in transmitting personal data within the group of undertakings for internal administrative purposes, including the processing of clients' or employees' personal data. The general principles for the transfer of personal data, within a group of undertakings, to an undertaking located in a third country remain unaffected.
GDPR Recital EN
Recital 48
Related across sources
Guidance Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidance Guidelines 05/2020 on consent under Regulation 2016/679 Guidance Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Guidance Guidelines 02/2024 on Article 48 GDPR Guidance Version history