Section 19 of the Act again provides (as above) Data to be processed and or stored outside of Uganda must be with consent of data subject, but there is no specification that it should be on case-by-case approvals.