> For the complete documentation index, see [llms.txt](https://www.mica.wtf/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.mica.wtf/mica.wtf/gdpr/chapter-v-transfers-of-personal-data-to-third-countries-or-international-organisations-art.-44-50/46.md). # Art. 46 — Transfers subject to appropriate safeguards 1. In the absence of a decision pursuant to [Article 45(3)](/mica.wtf/gdpr/chapter-v-transfers-of-personal-data-to-third-countries-or-international-organisations-art.-44-50/45.md), a [controller](https://headlesslaw.com/definitions/gdpr/controller/) or [processor](https://headlesslaw.com/definitions/gdpr/processor/) may transfer [personal data](https://headlesslaw.com/definitions/gdpr/personal-data/) to a third country or an [international organisation](https://headlesslaw.com/definitions/gdpr/international-organisation/) only if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available. 2. The appropriate safeguards referred to in paragraph 1 may be provided for, without requiring any specific authorisation from a [supervisory authority](https://headlesslaw.com/definitions/gdpr/supervisory-authority/), by: 1. a legally binding and enforceable instrument between public authorities or bodies; 2. [binding corporate rules](https://headlesslaw.com/definitions/gdpr/binding-corporate-rules/) in accordance with [Article 47](/mica.wtf/gdpr/chapter-v-transfers-of-personal-data-to-third-countries-or-international-organisations-art.-44-50/47.md); 3. standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in [Article 93(2)](/mica.wtf/gdpr/chapter-x-delegated-acts-and-implementing-acts-art.-92-93/93.md); 4. standard data protection clauses adopted by a supervisory authority and approved by the Commission pursuant to the examination procedure referred to in [Article 93(2)](/mica.wtf/gdpr/chapter-x-delegated-acts-and-implementing-acts-art.-92-93/93.md); 5. an approved code of conduct pursuant to [Article 40](/mica.wtf/gdpr/chapter-iv-controller-and-processor-art.-24-43/40.md) together with binding and enforceable commitments of the controller or processor in the third country to apply the appropriate safeguards, including as regards data subjects' rights; or 6. an approved certification mechanism pursuant to [Article 42](/mica.wtf/gdpr/chapter-iv-controller-and-processor-art.-24-43/42.md) together with binding and enforceable commitments of the controller or processor in the third country to apply the appropriate safeguards, including as regards data subjects' rights. 3. Subject to the authorisation from the competent supervisory authority, the appropriate safeguards referred to in paragraph 1 may also be provided for, in particular, by: 1. contractual clauses between the controller or processor and the controller, processor or the [recipient](https://headlesslaw.com/definitions/gdpr/recipient/) of the personal data in the third country or international organisation; or 2. provisions to be inserted into administrative arrangements between public authorities or bodies which include enforceable and effective data subject rights. 4. The supervisory authority shall apply the consistency mechanism referred to in [Article 63](/mica.wtf/gdpr/chapter-vii-cooperation-and-consistency-art.-60-76/63.md) in the cases referred to in paragraph 3 of this Article. 5. Authorisations by a Member State or supervisory authority on the basis of Article 26(2) of Directive 95/46/EC shall remain valid until amended, replaced or repealed, if necessary, by that supervisory authority. Decisions adopted by the Commission on the basis of Article 26(4) of Directive 95/46/EC shall remain in force until amended, replaced or repealed, if necessary, by a Commission Decision adopted in accordance with paragraph 2 of this Article. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://www.mica.wtf/mica.wtf/gdpr/chapter-v-transfers-of-personal-data-to-third-countries-or-international-organisations-art.-44-50/46.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.