EDPB Guidelines on Article 49

Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679

The document outlines the interpretation of Article 49 of the GDPR, detailing exceptions that allow for the transfer of personal data to countries without an adequacy decision or appropriate safeguards. These exceptions include data transfers with explicit consent from the data subject, transfers necessary for contract performance or pre-contractual measures, contracts in the data subject's interest, important public interest reasons, legal claims, vital interests of the data subject, data from public registers, and compelling legitimate interests. Each exception is discussed in detail.