{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-11-01","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/recitals/109","url":"https://www.headlesslaw.com/gdpr/recitals/109","title":"Recital 109","family":"l1_recital_view","work_id":"gdpr","view_of":"/gdpr/recitals","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Regulation (EU) 2016/679, OJ L 119, 4.5.2016","check":{"against":"EUR-Lex","on":"2026-11-01"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","valid_from":"2016-05-04","valid_until":null,"content_id":"d7ed8a260f9b283e","versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/recitals/109/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/recitals/109/versions/2016-05-04/rev/d7ed8a260f9b283e","versions_url":"https://www.headlesslaw.com/gdpr/recitals/109/versions","relations_url":"https://www.headlesslaw.com/gdpr/recitals/109/relations","act_url":"https://www.headlesslaw.com/gdpr/recitals","source_line":null,"attribution":null,"context":{"act":{"work_id":"gdpr","path":"/gdpr/recitals","name":"GDPR","number":"Regulation (EU) 2016/679","celex":"32016R0679","title_official":null,"document_date":null},"position":{"kind":"recital","key":"109","index":109,"articles":173,"annexes":0},"prev":{"path":"/gdpr/recitals/108","key":"108","title":"Recital 108"},"next":{"path":"/gdpr/recitals/110","key":"110","title":"Recital 110"},"act_anchor":""}},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679","check":{"result":"matched","checked_at":"2026-11-01","against":"EUR-Lex"},"repo_path":"spaces/gdpr/recitals.md","unit_text_sha256":"4406e28fa94dd72ce164dd87b2dafbf7bfd8f103ecae6f295f0e9cafd94613a7","note":"the unit is a byte-exact part of the act page, whose check record covers it"},"unit":{"locator":"gdpr/recitals/rec/109","kind":"recital","key":"109","heading":"","text":"The possibility for the controller or processor to use standard data-protection clauses adopted by the Commission or by a supervisory authority should prevent controllers or processors neither from including the standard data-protection clauses in a wider contract, such as a contract between the processor and another processor, nor from adding other clauses or additional safeguards provided that they do not contradict, directly or indirectly, the standard contractual clauses adopted by the Commission or by a supervisory authority or prejudice the fundamental rights or freedoms of the data subjects. Controllers and processors should be encouraged to provide additional safeguards via contractual commitments that supplement standard protection clauses.","marks":[],"text_hash":"4406e28fa94dd72ce164dd87b2dafbf7bfd8f103ecae6f295f0e9cafd94613a7","revision":1,"blocks":[{"locator":"gdpr/recitals/rec/109/block/1","text_hash":"4406e28fa94dd72ce164dd87b2dafbf7bfd8f103ecae6f295f0e9cafd94613a7","revision":1}]}}