An organisation shall not transfer any personal data to a country or territory outside Singapore except in accordance with requirements prescribed under the Personal Data Protection Act 2012 to ensure that organisations provide a standard of protection to personal data so transferred that is comparable to the protection under this Act.