On 12 September 2022, the Agency of Access to Public Information (AAIP) published the draft proposal for the Personal Data Protection Law and opened a public consultation until 30 September 2022. The Bill establishes that cross-border data transfers will be limited to countries providing an adequate level of protection. In the case the state where the data is to be transferred does not provide the same level of protection, the international transfers will be authorized based on an adequacy decision or adequate guarantees, including legally binding and enforceable instruments between the national authorities and international agreements that recognize model contractual clauses, binding corporate rules or data protection certification mechanisms.
Original source