OBS_VALUE: According to Article 38 of the Personal Information Protection Law, to transfer personal data abroad, it should satisfy either (1) security check by antional authority; (2) certified by recognised organization; or (3) standard contract.