GDPR Article 44 — General principle for transfers
Enforced by: ICO (UK) / National DPAs
Current as of May 25, 2018
Plain Language Summary
Cannot simply send EU personal data outside the EU/EEA. Need a lawful transfer mechanism: adequacy decision, SCCs, Binding Corporate Rules, or specific derogations.
Any transfer of personal data to a third country or to an international organisation shall take place only if the conditions laid down in this Chapter are complied with by the controller and processor, including for onward transfers. All provisions in this Chapter shall be applied in order to ensure that the level of protection of natural persons guaranteed by this Regulation is not undermined.