The mechanism new to the GDPR under Article 42 that allows for the possibility of personal data transfers to third countries is approved certifications. Article 42 of the GDPR specifically introduces the concept of certification mechanisms, including data protection seals and marks, to demonstrate compliance with the regulations and facilitate the transfer of personal data to third countries.