<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/48","url":"https://www.headlesslaw.com/gdpr/articles/48","title":"Article 48 — Transfers or disclosures not authorised by Union law","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"0aa5593029ee824c","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/48/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/48/versions/2016-05-04/rev/0aa5593029ee824c","versions_url":"https://www.headlesslaw.com/gdpr/articles/48/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/48/relations","source_line":null,"attribution":null}} -->
---
title: "Article 48 — Transfers or disclosures not authorised by Union law"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
source_retrieved: 2026-09-28
shortTitle: "Article 48 — Transfers or disclosures not authorised by Union law"
instrument_type: level1_regulation
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Regulation (EU) 2016/679"
instrument: gdpr
celex: "32016R0679"
regulation: GDPR
regulation-full: "Regulation (EU) 2016/679"
article: 48
status: in_force
object_id: eu.gdpr.legal_text.article.48
text_version: "Consolidated version of 4 May 2016"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*

Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a [controller](https://www.headlesslaw.com/definitions/gdpr/controller) or [processor](https://www.headlesslaw.com/definitions/gdpr/processor) to transfer or disclose [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) may only be recognised or enforceable in any manner if based on an international agreement, such as a mutual legal assistance treaty, in force between the requesting third country and the Union or a Member State, without prejudice to other grounds for transfer pursuant to this Chapter.

## Related Level 2 and Level 3

### Guidance and Q&A

- [EDPB 02/2024 — Guideline — Article 48 GDPR \[final\]](../level-3/guidelines/edpb-02-2024-article-48.md)

***

[Chapter V — Transfers of personal data to third countries or international organisations](../chapters/v.md) · [← Article 47](47.md) · [Article 49 →](49.md)