Regulation (EU) 2016/679 as retained in UK law (UK GDPR) – Article 44A – General principles for transfers
Articles
Article 44A[F1General principles for transfers
1. A controller or processor may transfer personal data to a third country or an international organisation only if—
- (a)the condition in paragraph 2 is met, and
- (b)the transfer is carried out in compliance with the other provisions of this Regulation.
2. The condition is met if the transfer—
- (a)is approved by regulations under Article 45A that are in force at the time of the transfer,
- (b)is made subject to appropriate safeguards (see Article 46), or
- (c)is made in reliance on a derogation for specific situations (see Article 49).
3. A transfer may not be made in reliance on paragraph 2(b) or (c) if, or to the extent that, it would breach a restriction in regulations under Article 49A.]
Amended text
This Article is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.
Annotations and footnotes
Textual Amendments
- F1 Art. 44A inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 7 para. 2(2); S.I. 2026/82, reg. 2(z9)
https://uk-gdpr.digiphile.law/article/article-44A.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.