{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-45","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-45)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:eu:ce0366","proof":"sha256:24360dc3e53cc76304dd4e7974a9a9d5dc16829f4f8cba6e19be164525b61f6e","jurisdiction":"eu"},"brand_source":"Source: NovaCopilot","object_type":"article_agent","schema_version":"1.0.0","id":"agent:eu:gdpr:art-45","act":"gdpr-2016-679","article":"45","text_sha256":"d1c0be7c78d7e4ccf59c17f700c34139a5ab2eecfce73001f71bbd95edcf78e8","obligations":[],"agent":"agent:eu:gdpr","name":"NovaCopilot GDPR Agent, Article 45","title":{"en":"Transfers on the basis of an adequacy decision","sv":"Överföring på grundval av ett beslut om adekvat skyddsnivå","de":"Datenübermittlung auf der Grundlage eines Angemessenheitsbeschlusses"},"text":{"lang":"en","paragraphs":["1. A transfer of personal data to a third country or an international organisation may take place where the Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organisation in question ensures an adequate level of protection. Such a transfer shall not require any specific authorisation.","2. When assessing the adequacy of the level of protection, the Commission shall, in particular, take account of the following elements:","(a)","the rule of law, respect for human rights and fundamental freedoms, relevant legislation, both general and sectoral, including concerning public security, defence, national security and criminal law and the access of public authorities to personal data, as well as the implementation of such legislat …","(b)","the existence and effective functioning of one or more independent supervisory authorities in the third country or to which an international organisation is subject, with responsibility for ensuring and enforcing compliance with the data protection rules, including adequate enforcement powers, for assisting and advising the data subjects in exercising their rights and for cooperation with the supervisory authorities of the Member States; and","(c)","the international commitments the third country or international organisation concerned has entered into, or other obligations arising from legally binding conventions or instruments as well as from its participation in multilateral or regional systems, in particular in relation to the protection of personal data.","3. The Commission, after assessing the adequacy of the level of protection, may decide, by means of implementing act, that a third country, a territory or one or more specified sectors within a third country, or an international organisation ensures an adequate level of protection within the meaning …","4. The Commission shall, on an ongoing basis, monitor developments in third countries and international organisations that could affect the functioning of decisions adopted pursuant to paragraph 3 of this Article and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC.","5. The Commission shall, where available information reveals, in particular following the review referred to in paragraph 3 of this Article, that a third country, a territory or one or more specified sectors within a third country, or an international organisation no longer ensures an adequate level …","On duly justified imperative grounds of urgency, the Commission shall adopt immediately applicable implementing acts in accordance with the procedure referred to in Article 93(3).","6. The Commission shall enter into consultations with the third country or international organisation with a view to remedying the situation giving rise to the decision made pursuant to paragraph 5.","7. A decision pursuant to paragraph 5 of this Article is without prejudice to transfers of personal data to the third country, a territory or one or more specified sectors within that third country, or the international organisation in question pursuant to Articles 46 to 49."],"source_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32016R0679","read_at":"2026-08-18"},"sha256":"5f4046a96dfb3a1176cdb86e7f1a109dc9de91cec2d4f042b23c72eb8a7efc7b","duties":[],"applies_to_role":{"status":"not_in_register","roles":[]},"applies_to_industry":{"status":"not_in_register","industries":[]},"cross_industry_chains":{"status":"not_in_register","chains":[]},"revenue_exposure":{"status":"verified","sanction_article":"83","source_url":"https://eur-lex.europa.eu/eli/reg/2016/679/oj","tiers":[{"article":"83(4)","basis":"max","percent_worldwide_turnover":2,"fixed_eur":10000000,"rule":"higher","applies_to":"controller_processor_obligations"},{"article":"83(5)","basis":"max","percent_worldwide_turnover":4,"fixed_eur":20000000,"rule":"higher","applies_to":"principles_rights_transfers"}],"via":"article 83"},"links":{"article_page":"https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-45","regulation_agent":"https://legal.exploreworldai.com/api/public/v1/article-agents?reg=gdpr","changes":"https://legal.exploreworldai.com/api/public/v1/intelligence-graph/change?reg=gdpr"},"llm_used":false,"hash":"sha256:24360dc3e53cc76304dd4e7974a9a9d5dc16829f4f8cba6e19be164525b61f6e","version":"legal-2026-11-02","expires":"2026-11-04T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:24360dc3e53cc76304dd4e7974a9a9d5dc16829f4f8cba6e19be164525b61f6e","revalidate_after":"2026-11-03T04:15:37.071Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-45","disclaimer":"Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.","content_notice":{"legal_advice":false,"nature":"Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.","kinds":{"official_text":"Officiell källtext, ordagrann och ej tolkad","summary":"Sammanfattning, ej juristgranskad. Läs alltid källtexten","classification":"Automatisk märkning ur källans egen text, ej juristgranskad"},"rule":"Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/article-agent","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"access_class":"public","access_view":"public","freshness":{"freshness_class":"live","as_of":"2026-11-03T03:15:37.672Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/article-agent?id=agent%3Aeu%3Agdpr%3Aart-45","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":2003}}