Section 8 of the Pakistan Cloud Policy First states that whenever there are legitimate use-cases requiring cross-border data flows, then the relevant stakeholders may consult with the cloud office to ensure that appropriate information security standards and controls are in place for such data flows.