Personal data may be transferred and disclosed to a country or international organizations not ensuring an adequate level of data protection if the data subject has given his or her consent. Furthermore, if sufficient private sector safeguards are put in place by the data sender, and subject to a specific authorisation by the Data Protection Agency, personal data may be sent to countries or organisations that do not ensure an adequate level of data protection.  