Article 47 (1) of the Data Protection Act states that personal data shall not be transferred to a country or territory outside Seychelles unless the data processor in the recipient country or territory ensures a comparable level of protection for the rights and freedoms of data subjects in relation to the processing of personal data. The Information Commission is responsible for establishing a comparable level of protection by taking into consideration the following —(a) the nature of the personal data;(b) the purposes and period of time the data is intended to be processed;(c) the law in force in the country of destination of the data;(d) any cross-border privacy rules scheme; and(e) any international agreements regarding data protection signed by the data controller in the country of destination of the data.