Article 49
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Article 49 - The GDPR article listing derogations - narrow, last-resort grounds for a transfer when no adequacy decision or appropriate safeguard is available.
In the CIPP/E body of knowledge, Article 49 comes up under Ch 12.6-12.9 - Mechanisms compared & outlook; Ch 12.8 - Derogations; IAPP Training · Module 7 - BoK III.D.
Article 49 in context
- Where there is neither adequacy nor appropriate safeguards, a transfer may still rely on an [[Article 49]] [[derogation]]. (Relying on the Article 49 derogations)
- This pulls the four main routes together - [[adequacy decision]], [[standard contractual clauses|SCCs]], [[BCRs]], and [[Article 49]] [[derogation|derogations]] - and this guide's outlook. (Comparing the transfer mechanisms & the future of restrictions)
- Options to provide appropriate safeguards: geographically limiting the cloud, the 2021 [[SCCs]] (module two), tailored transfer agreements, processor [[BCRs]], codes/certification, or an [[Article 49]] derogation. (Cloud: international data transfers)
Where Article 49 is covered in the CIPP/E study notes
- Relying on the Article 49 derogations
- Comparing the transfer mechanisms & the future of restrictions
- Module 7 · Derogations & restrictions (Article 49)
Related terms
- Explicit consent
- Compelling legitimate interests
- Adequacy decision
- Standard contractual clauses
- BCRs
- Derogations
- Article 48
- Article 49(5)
Test yourself on Article 49
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.