Law on Protection of personal data has been replaced by Personal Data Protection Act in 2018. Transfer of data in private sector is possible when adhering to the binding business rules however, the Commissioner may further regulate the way information is exchanged between handlers.