Europrivacy under GDPR Art. 46(2)(f)

An approved Article 42 certification, together with binding and enforceable commitments of the importer, is an appropriate safeguard for transfers. Europrivacy's criteria are the only ones approved for that purpose (Opinion 15/2026).

Invalidation trigger

The EDPB withdraws or amends Opinion 15/2026, the certificate is withdrawn or lapses, or the importer's binding and enforceable commitments are absent.

Sources

1. [1]Regulation (EU) 2016/679 (GDPR), Art. 46(2)(f) · retrieved 2026-09-17 · https://eur-lex.europa.eu/eli/reg/2016/679/oj
2. [2]EDPB Opinion 15/2026 on the Europrivacy certification criteria as European Data Protection Seal to be used as tool for transfers, paras 25, 52 and 53 · retrieved 2026-09-17 · https://www.edpb.europa.eu/system/files/2026-04/edpb_opinion_202615_europrivacy_en.pdf
3. [3]EDPB register of certification mechanisms, seals and marks (filtered on certification as tool for transfers), 1 item, Europrivacy Certification Scheme Extension for Certifying Data Importers under Article 46 · retrieved 2026-09-17 · https://www.edpb.europa.eu/registers/register-of-consistency-and-of-accountability-tools/certification-mechanisms-and-data_en

Confidence

high

Jurisdiction

European Union · coverage drafting

Permanent URL

/effect/european-union/gdpr-46-2-f/europrivacy