UK GDPRUK · retained 2016/679
Digiphile
Regulation (EU) 2016/679 as retained in UK law (UK GDPR) – Article 47A – Transfers subject to appropriate safeguards: further provision

Articles

Article 47A[F1Transfers subject to appropriate safeguards: further provision

1. The Secretary of State may by regulations specify standard data protection clauses which the Secretary of State considers are capable of securing that the data protection test set out in Article 46 is met in relation to transfers of personal data generally or in relation to a type of transfer specified in the regulations.
2. The Secretary of State must keep under review the standard data protection clauses specified in regulations under paragraph 1 that are for the time being in force.
3. Regulations under paragraph 1 are subject to the negative resolution procedure.
4. The Secretary of State may by regulations make provision about further safeguards that may be relied on for the purposes of Article 46(1A)(a).
5. The Secretary of State may only make regulations under paragraph 4 if the Secretary of State considers that the further safeguards are capable of securing that the data protection test set out in Article 46 is met in relation to transfers of personal data generally or in relation to a type of transfer specified in the regulations.
6. Regulations under paragraph 4 may, among other things—
  • (a)
    make provision by adopting safeguards prepared or published by another person;
  • (b)
    make provision about ways of providing safeguards which require authorisation from the [F2Commission].
7. Regulations under paragraph 4 which amend Article 46 may do so only in the following ways—
  • (a)
    by adding ways of providing safeguards, or
  • (b)
    by varying or omitting ways of providing safeguards which were added by regulations under this Article.
8. Regulations under paragraph 4 are subject to the affirmative resolution procedure.]

Amended text

This Article is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations and footnotes

Textual Amendments

  1. F1 Art. 47A inserted (19.6.2025 for specified purposes, 5.2.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), s. 142(1)(2)(h), Sch. 7 para. 8; S.I. 2026/82, reg. 2(z9)
  2. F2 Word in Art. 47A(6)(b) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 3 para. 41(3)(4)(u); S.I. 2026/1015, reg. 2(c)

https://uk-gdpr.digiphile.law/article/article-47A.html

Text as at 17 September 2026.

This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.