Implementation of the codes of conduct by those subjects, which are outside the scope of this regulation
In addition to adherence by controllers or processors subject to this Regulation, codes of conduct approved pursuant to paragraph 5 of this Article and having general validity pursuant to paragraph 9 of this Article may also be adhered to by controllers or processors that are not subject to this Regulation pursuant to Article 3 in order to provide appropriate safeguards within the framework of personal data transfers to third countries or international organisations under the terms referred to in point (e) of Article 46(2). Such controllers or processors shall make binding and enforceable commitments, via contractual or other legally binding instruments, to apply those appropriate safeguards including with regard to the rights of data subjects.
Chapter IV, Section 4, Article 40, Paragraph 3
Regulation's subject matter
Codes of conduct (Article 40, Section 5, Chapter IV)
Controller that is not subject to this Regulation Processor that is not subject to this Regulation
Data subject International organisation Third country