Article 48: Transfers or disclosures not authorised by Union law
Praxikon tracks Article 48 (Transfers or disclosures not authorised by Union law) under the GDPR, alongside the EU AI Act, citing the source for every statement.
Chapter VIn force since 25-05-2018
Official text
/
Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to transfer or disclose personal data may only be recognised or enforceable in any manner if based on an international agreement, such as a mutual legal assistance treaty, in force between the requesting third country and the Union or a Member State, without prejudice to other grounds for transfer pursuant to this Chapter.
Source: EUR-Lex, Regulation (EU) 2016/679. Official text, reproduced without modification.
More case law, guidelines and fines
In addition to the overview at the bottom of this page: rulings, guidelines and fines that interpret or apply this article, newest first. Each item was checked against the official source.
Guidelines (1)
- 4 June 2025 · v2.1 · EDPBGuidelines 02/2024 on Article 48 GDPR
Explains how an organisation should handle a request from a third country court or authority to disclose personal data, which requires both a legal basis and a transfer tool.
Checked on 5 November 2026