[Guidelines 02/2024 on Article 48 GDPR] [Back to Flowcharts]

flowchart TD
    B{"Is the request based on a judgement or decision from a court/tribunal or administrative authority of a third country?"}
    B -- No --> C["General Rules for transfers apply <BR> ('**Two-Step Test**')"]
    B -- Yes --> D{"Is the judgement or decision based on an applicable international agreement?"}
    D -- No --> C
    D -- Yes --> E{"Does the international agreement provide for a legal basis under Art. 6(1)(c) or Art. 6(1)(e) GDPR?"}
    E -- No --> C
    E -- Yes --> F{"Does the international agreement contain appropriate safeguards per Art. 46(2)(a) and EDPB Guidelines 2/2020?"}
    F -- No --> G["You must rely on another ground for transfer in Chapter V"]
    F -- Yes --> H["You may transfer the data"]
    
    %% Styling for better readability
    style H fill:#2e5e4a,stroke:#333,stroke-width:2px
    style G fill:#be474a,stroke:#333,stroke-width:2px
    style C fill:#b66c29,stroke:#333,stroke-width:2px
    

This flowchart illustrates the decision-making process for handling Article 48 GDPR requests, showing the key steps and considerations required before transferring data to third countries.