GDPR - Transfers or Disclosures not Authorized by Union Law - Summary

Executive Summary
If you disclose data as a result of a court action you may be held liable as a Controller or Processor in the EEA.
Article Text
Any judgment of a court or tribunal and any decision of an administrative authority of a third country requiring a controller or processor to transfer or disclose personal data may only be recognised or enforceable in any manner if based on an international agreement, such as a mutual legal assistance treaty, in force between the requesting third country and the Union or a Member State, without prejudice to other grounds for transfer pursuant to this Chapter.