.Law on Protection of personal data has been replaced by Personal Data Protection Act in 2018. Transfer of data to other countries or international organizations is based on the receivers ability to provide the appropriate level of protection.  