Skip to main content

61. Does Article 32 cover international data transfers between or inside businesses?

No. Similar to Article 31 of the Data Governance Act, Article 32 of the Data Act covers only a very small and specific subset of international data flows – those which result from an unlawful access to or transfer of non-personal data by non-EU public authorities. These Articles do not cover data transfers between private entities on both sides of the EU border. Rather, they prevent access to or transfers of non-personal data by non-EU public authorities that are contrary to EU or Member State law. International transfers of personal data are regulated under the GDPR.