In accordance with RK Law on Personal Data and their Protection trans-border transfer of personal data to the territory of the foreign states shall be carried out only in the case of ensuring of protection of personal data by these states. Absent such protection policy, any cross-border transfer of the personal data will be possible in the following cases: 1) existence of the consent of subject or his (her) legal representative to the trans-border transfer of his (her) personal data; 2) provided international treaties, ratified by the Republic of Kazakhstan; 3) provided by the Laws of the Republic of Kazakhstan, if it is necessary for the purposes of protection of constitutional order, protection of public order, rights and freedoms of person and citizen, health and morals of population; 4) protection of constitutional rights and freedoms of person and citizen, if reception of the consent of subject or his (her) legal representative is impossible.  Cross-border transfer of personal data may be restricted or prohibited by the statutory laws of Kazakhstan. 