On 17 October 2020, Personal Data Protection Law (No. 151 of 2020) entered into force. The law introduced regulations for cross-border data transfers. The law specifies that such transfers require prior approval from the Personal Data Protection Centre (PDPC) or assurance that the recipient country provides adequate data protection. Entities must maintain records of cross-border data transfers and implement security measures to protect data during transmission. Notification to the PDPC is mandatory for these activities.
Original source