Section 19 of the Act states that  a data procesor or collector can transfer data after gaining the consent of the data subject and that the country in which the transfer for processing and storage is done must have adequate measures in place for the protection of such personal data at least equivalent to the protection provided by the Act itself. Prior to 2019 there were no regulations regarding the transfer of data 