Cross-border data transfer is only possible to countries that ensure an adequate level of protection or if certain safeguards are in place (cross-border data transfer to the country that does not ensure adequate level of data protection is possible only upon receipt of the written consent of the data subject). Countries with adequate level of protection include signatories to the Strasbourg Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data as well as countries approved by the regulator (Roskomnadzor), if legal framework and data protection measures in such countries comply with the provisions of the said Convention.  