2. The appropriate safeguards referred to in paragraph 1 may be provided for, without requiring any specific authorisation from the European Data Protection Supervisor, by:
|
(a)
|
a legally binding and enforceable instrument between public authorities or bodies;
|
|
(b)
|
standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 96(2);
|
|
(c)
|
standard data protection clauses adopted by the European Data Protection Supervisor and approved by the Commission pursuant to the examination procedure referred to in Article 96(2);
|
|
(d)
|
where the processor is not a Union institution or body, binding corporate rules, codes of conduct or certification mechanisms pursuant to points (b), (e) and (f) of Article 46(2) of Regulation (EU) 2016/679.
|