The new decree 13/2023 on protection of personal data requires any company seeking to complete a cross-border data transfer to undertake a data transfer assessment (DTA) to the Ministry of Public Security - Cybersecurity and High-Tech Crime Prevention Department (MPS) for approval. Based on the specific situation of each case, the MPS can decide to inspect once a year or stop the cross-border transfer of personal data of the company. 