New EDPB guidelines clarify rules for disclosing personal data to third countries
The European Data Protection Board’s new guidelines on Article 48 GDPR clarify that EU-based organisations may only disclose personal data to third-country authorities if an international agreement is in place. The guidelines reinforces legal safeguards against extraterritorial data access and outlines strict conditions for lawful transfers, ensuring EU data protection standards are not undermined.