Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies

Section 1.3  Definition of a public authority or body

8.The GDPR does not define what constitutes a ‘public authority or body’. The EDPB considers that this notion is broad enough to cover both public bodies in third countries and international organisations. With respect to public bodies in third countries, the notion is to be determined under domestic law. Accordingly, public bodies include government authorities at different levels (e.g. national, regional and local authorities), but also include other bodies governed by public law (e.g. executive agencies).