GDPR Chapter V mechanism under which personal data may only leave the EEA on the basis of an Adequacy decision, appropriate safeguards such as BCR, or a narrow derogation under Article 49. The umbrella concept that Adequacy decision and BCR both sit beneath, and the natural internal-linking hub for any future content on international transfers.