EDPB's June 2025 guidelines clarify handling third-country data requests under Article 48 GDPR. Data transfer requires international agreements; without them, compliance risks arise. Companies must ensure valid legal grounds for processing and transferring data before responding to requests.
https://www.taylorwessing.com/en/insights-and-events/insights/2025/06/article-48-gdpr