1Transfers which can be qualified as not repetitive and that only concern a limited number of data subjects, could also be possible for the purposes of the compelling legitimate interests pursued by the controller, when those interests are not overridden by the interests or rights and freedoms of the data subject and when the controller has assessed all the circumstances surrounding the data transfer. 2The controller should give particular consideration to the nature of the personal data, the purpose and duration of the proposed processing operation or operations, as well as the situation in the country of origin, the third country and the country of final destination, and should provide suitable safeguards to protect fundamental rights and freedoms of natural persons with regard to the processing of their personal data. 3Such transfers should be possible only in residual cases where none of the other grounds for transfer are applicable. 4For scientific or historical research purposes or statistical purposes, the legitimate expectations of society for an increase of knowledge should be taken into consideration. 5The controller should inform the supervisory authority and the data subject about the transfer.
* This title is an unofficial description.
Why Recital 113 Matters for GDPR Compliance?
Recital 113 matters for GDPR compliance because it addresses transfers that are not repetitive and concern only a limited number of data subjects. These transfers may be based on the legitimate interests of the controller, provided that such interests are not overridden by the rights and freedoms of individuals. The recital requires careful assessment and documentation to ensure transparency and accountability when relying on this exceptional transfer mechanism.