RegulationonPersonalDataEN

None of the exemptions granted in accordance with the cases stipulated in Article (4) of the Regulation shall apply if any of the following situations arise: A. The controller has failed to implement the appropriate safeguards. B. If the competent authority determines that the appropriate safeguards are inadequate for any specific case. If any of the conditions stipulated in subparagraphs (a) and (b) of paragraph (1) of this Article are met, the controller shall halt the transfer or disclosure and notify the entities to whom the personal data was transferred or disclosed.