Laws · GDPR ·art-49-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
In the absence of an adequacy decision pursuant to Article 45(3), or of appropriate safeguards pursuant to Article 46, including binding corporate rules, a transfer or a set of transfers of personal data to a third country or an international organisation shall take place only on one of the following conditions:
How it connects
Cited by
- Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679
- Website providing legal information: Insufficient fulfilment of information obligations
- hier
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Court of Justice of the European Union - Case C-422/24 - AB Storstockholms Lokaltrafik.
All 26
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- APD/GBA (Belgium) - 11/2022
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak
- Contribution of the EDPB to the evaluation of the GDPR under Article 97
- WhatsApp Ireland Ltd v European Data Protection Board
- Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik
- European Commission v Republic of Poland
- European Commission v Republic of Poland
- Ligue des droits humains ASBL v Conseil des ministres
- European Commission v Republic of Poland
- European Commission v Republic of Poland
- Data Protection Regulation and International Arbitration: Can There Be Harmonious Coexistence (with the GDPR Requirements Concerning Cross-Border Data Transfer)?
- NAIH (Hungary) - NAIH-11443-3/2026
- National court annuls DPA sanction against KFC Spain over website privacy information
- NAIH (Hungary) - NAIH-450-7-2026
- AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber
- NAIH (Hungary) - NAIH-4462-5-2026
- Austrian DSB: e-marketplace transfer of customer data to China and US requires valid Art.
- OVG Sachsen - 7 C 35/24
- AEPD: CaixaBank requested excessive inheritance documentation from heirs
Related across sources
C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB May 25, 2018 Privacy Shield Lawful Basis Legitimate Interest
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield Supervision IP Address
CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is Processing: Communication of personal data in response to a request for access to documents constitutes processing. (¶69) Jun 29, 2010 Personal Data Legitimate Interest Right to Restriction
C-422/24 Case C-422/24 - AB Storstockholms Lokaltrafik. A new page has been created with the following information: "" CJEU Jan 7, 2026 Personal Data Fairness & Transparency Controllers
Guidelines 07/2022 certification as a tool for transfers Guidelines on certification and identifying certification criteria Guidelines ·EDPB Feb 24, 2023 Certification International Transfer Processing Agreement