When can a US litigant rely on GDPR Article 49 derogations (necessary for legal claims) to transfer personal data without an adequacy decision or SCCs?

When personal data sits in the European Union and is needed for US litigation, the General Data Protection Regulation (GDPR) restricts transferring it outside the EU. The preferred routes are an adequacy decision or appropriate safeguards such as Standard Contractual Clauses (SCCs). Article 49 sets out narrow “derogations” for specific situations, including transfers “necessary for the establishment, exercise or defence of legal claims.” US litigants sometimes look to this derogation for discovery, but it is meant to be exceptional, not a routine substitute for the standard mechanisms.

What the legal-claims derogation requires

The derogation is generally available only when several conditions are satisfied:

• A genuine legal claim exists. There must be an actual or reasonably anticipated legal proceeding, not a speculative or precautionary collection of data.
• The transfer is truly necessary. You must show a close, substantial link between the data and the specific claim or defense. Bulk or “just in case” transfers typically fail this test.
• Other transfer tools are unavailable or impractical. European regulators have treated Article 49 derogations as a fallback after adequacy and safeguards like SCCs have been considered.

Why scope and proportionality matter

Even where the derogation applies, the core GDPR principles still govern the transfer. Data should be limited to what is relevant and proportionate, minimized before transfer, and protected during processing. Practitioners often reduce risk by filtering and reviewing data inside the EU first, anonymizing or pseudonymizing where possible, and transferring only what the proceeding genuinely requires.

Balancing US discovery obligations

US civil discovery under the Federal Rules of Civil Procedure can call for broad production, which may collide with EU restrictions. Courts weigh these competing obligations and expect parties to act in good faith, document their analysis, and avoid both over-collection and unjustified withholding. Outcomes vary by jurisdiction, and state courts and non-US tribunals may apply different standards.

This is a high-stakes, fact-specific area. Treat Article 49 as a last resort, confirm the analysis with qualified EU and US counsel, and keep a clear record of your reasoning.

For related guidance, see e-discovery.

This page is educational and not legal advice.