Prohibition on recognizing unauthorized third country data transfer orders

Controllers and processors must not recognize or allow enforcement of any judgment of a court or tribunal or decision of an administrative authority of a third country requiring transfer or disclosure of personal data, unless such judgment or decision is based on an international agreement (such as a mutual legal assistance treaty) in force between the requesting third country and the Union or a Member State, or other grounds for transfer pursuant to Chapter V exist.