# GDPR Recital 48

General Data Protection Regulation (GDPR), version 2026.1, in force since 25 May 2018. Read from https://publications.europa.eu/resource/celex/32016R0679. Each clause starts with its key, which is how to cite it.

## gdpr-recitals:rec-48

Controllers that are part of a group of undertakings or institutions affiliated to a central body may have a legitimate interest in transmitting personal data within the group of undertakings for internal administrative purposes, including the processing of clients' or employees' personal data. The general principles for the transfer of personal data, within a group of undertakings, to an undertaking located in a third country remain unaffected.

Page: https://dpolens.com/laws/gdpr/rec-48