Cross-border transfer of data requires the receiving country to guarantee adequate levels of protection (similar to those in place in Colombia) or special safeguards such as the written consent of the data-owner.