Article 49 provides derogations for specific situations. These derogations allow transfers when:
- A.The controller wants to save money, citing Article 49(1)(e), which allows transfers necessary to protect vital interests even when the data subject is capable of giving consent
- B.The transfer is convenient for the controller, citing Article 6(4), which allows the compatibility test to be skipped whenever the controller is a public authority
- C.Any party requests the transfer
- D.Specific conditions are met, such as explicit consent, contractual necessity, or important public interest
Why D is correct
Article 49 provides limited derogations including explicit consent, contractual necessity, important public interest, legal claims, vital interests, and transfers from a public register.
Know someone studying for GDPR? Send them this one.