Transfer can only take place when the data exporter puts in place safeguards to ensure that the recipient will provide a comparable level of protection. This can be done through contractual means. Furthermore, the data subjects must also be notified that their data will be transferred outside of Canada.