OBS_VALUE: Only the personal information subjected to adequate level of legal protection can be cross-borderly transferred. Eight principles of lawful data transfer are: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, data subject participation.