Personal data may be transferred when the purposes are directly related to the legitimate interest of the assignor and the assignee and with the prior consent of the owner of the data, who must be informed of the purpose of the transfer.The transfer of personal data of any kind to countries or international organizations that do not provide adequate levels of security and protection is prohibited.