3. Subject to the authorisation from the European Data Protection Supervisor, the appropriate safeguards referred to in paragraph 1 may also be provided for, in particular, by:
|
(a)
|
contractual clauses between the controller or processor and the controller, processor or the recipient of the personal data in the third country or international organisation; or
|
|
(b)
|
provisions to be inserted into administrative arrangements between public authorities or bodies which include enforceable and effective data subject rights.
|