The transfer of personal information abroad is permitted when the laws of the destination country are substantially similar to the information protection principles under Data Protection Act of Lesotho, Section 52 (a).