On 11 October 2022, the public consultation on the draft proposal for the Personal Data Protection Law, published by the Agency of Access to Public Information (AAIP), closed, after the consultation period was extended on 30 September 2022. The Bill establishes that cross-border data transfers will be limited to countries providing an adequate level of protection. In the case the state where the data is to be transferred does not provide the same level of protection, the international transfers will be authorized based on an adequacy decision or adequate guarantees, including legally binding and enforceable instruments between the national authorities and international agreements that recognize model contractual clauses, binding corporate rules or data protection certification mechanisms.
Original source