General Data Protection Regulation (GDPR)
Table of Contents
Chapter I – General provisions
Chapter II – Principles
Chapter III – Rights of the data subject
Chapter IV – Section 4
Chapter V – Section 5
Chapter VI – Independent supervisory authorities
Chapter VII – Cooperation and consistency
Chapter VIII – Remedies, liability and penalties
Chapter IX – Provisions relating to specific processing situations
Chapter X – Delegated acts and implementing acts
Chapter XI – Final provisions
Recitals (173)
Recital 113
(113) Transfers which can be qualified as not repetitive and that only concern a limited number of data subjects, could also be possible for the purposes of the compelling legitimate interests pursued by the controller, when those interests are not overridden by the interests or rights and freedoms of the data subject and when the controller has assessed all the circumstances surrounding the data transfer. The controller should give particular consideration to the nature of the personal data, the purpose and duration of the proposed processing operation or operations, as well as the situation in the country of origin, the third country and the country of final destination, and should provide suitable safeguards to protect fundamental rights and freedoms of natural persons with regard to the processing of their personal data. Such transfers should be possible only in residual cases where none of the other grounds for transfer are applicable. For scientific or historical research purposes or statistical purposes, the legitimate expectations of society for an increase of knowledge should be taken into consideration. The controller should inform the supervisory authority and the data subject about the transfer.