Section 16: Cross-border transfer of personal data

What Section 16 says, in plain English

The Central Government may restrict transfers to specified countries by notification. Default position: transfers are permitted unless restricted. This is opposite to GDPR's approach.

What it means for you

Log outbound cross-border transfers in a register. If a country restriction is notified, you can act fast without needing a full data-map first.

How this is operationalised in dcomply

The Cross-Border Transfers module keeps a register of outbound transfers. If the Central Government notifies a country restriction, the impact analysis is one query away.