Personal data may only be transferred to another country that ensures the same level of data protection as the data sender in India and the transfer is necessary for the performance of a contract or where the relevant person has consented to data transfer. India recently passed its Digital Personal Data Protection Act 2023. For the trasnfer of data online the Central government may restrict of personal data to certain countries through notification. See: https://prsindia.org/billtrack/digital-personal-data-protection-bill-2023