{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/48","url":"https://www.headlesslaw.com/gdpr/articles/48","title":"Article 48 — Transfers or disclosures not authorised by Union law","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"0aa5593029ee824c","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/48/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/48/versions/2016-05-04/rev/0aa5593029ee824c","versions_url":"https://www.headlesslaw.com/gdpr/articles/48/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/48/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/articles/48.md","body_sha256":"4f38bbf711106198701431a1707adec1833cbe1154b0eb3ee1b05437ae1dec52"},"units":[{"locator":"gdpr/art/48","kind":"article","status":"in_force","label":null,"heading":"Transfers or disclosures not authorised by Union law","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"gdpr/art/48/subpara/1","kind":"subparagraph","status":"in_force","label":null,"heading":null,"text":"Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to transfer or disclose personal data may only be recognised or enforceable in any manner if based on an international agreement, such as a mutual legal assistance treaty, in force between the requesting third country and the Union or a Member State, without prejudice to other grounds for transfer pursuant to this Chapter.","marks":[],"revision":1,"text_hash":"50c23c0d1282fb40a5e3d860ee321c9018ed19b7cdf951a9efd3d6111630cbd3","reason":null}],"markdown":"---\ntitle: \"Article 48 — Transfers or disclosures not authorised by Union law\"\ntype: regulation\nlegal_status: in_force\nsource: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\nsource_retrieved: 2026-09-28\nshortTitle: \"Article 48 — Transfers or disclosures not authorised by Union law\"\ninstrument_type: level1_regulation\nauthority: Commission\nbinding: true\nbinding_character: binding\nmica_level2: false\nlegal_basis: \"Regulation (EU) 2016/679\"\ninstrument: gdpr\ncelex: \"32016R0679\"\nregulation: GDPR\nregulation-full: \"Regulation (EU) 2016/679\"\narticle: 48\nstatus: in_force\nobject_id: eu.gdpr.legal_text.article.48\ntext_version: \"Consolidated version of 4 May 2016\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*\n\nAny judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a [controller](https://www.headlesslaw.com/definitions/gdpr/controller) or [processor](https://www.headlesslaw.com/definitions/gdpr/processor) to transfer or disclose [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) may only be recognised or enforceable in any manner if based on an international agreement, such as a mutual legal assistance treaty, in force between the requesting third country and the Union or a Member State, without prejudice to other grounds for transfer pursuant to this Chapter.\n\n## Related Level 2 and Level 3\n\n### Guidance and Q&A\n\n- [EDPB 02/2024 — Guideline — Article 48 GDPR \\[final\\]](../level-3/guidelines/edpb-02-2024-article-48.md)\n\n***\n\n[Chapter V — Transfers of personal data to third countries or international organisations](../chapters/v.md) · [← Article 47](47.md) · [Article 49 →](49.md)\n"}