In the absence of a decision pursuant to  Article 45 (3), a controller or processor may transfer personal data to a third country or an international organisation only if the controller or processor has provided appropriate safeguards, and on condition ...

The appropriate safeguards referred to in paragraph 1 may be provided for, without requiring any specific authorisation from a supervisory authority, by: (a) a legally binding and enforceable instrument between public authorities or bodies; (b)...

Subject to the authorisation from the competent supervisory authority, the appropriate safeguards referred to in paragraph 1 may also be provided for, in particular, by: (a) contractual clauses between the controller or processor and the controller,...

The supervisory authority shall apply the consistency mechanism referred to in  Article 63  in the cases referred to in paragraph 3 of this Article.

1 Authorisations by a Member State or supervisory authority on the basis of Article 26(2) of Directive 95/46/EC  shall remain valid until amended, replaced or repealed, if necessary, by that supervisory authority. 2 Decisions adopted by the Commission on...