What changed
Business operators must explain the recipient country's data protection framework and the measures the recipient takes. The PPC also refined expectations for leakage incident reporting timelines.
Why this is marked medium impact
Narrower or procedural effect, or a change that only bites in specific circumstances. Impact is our editorial read of scope, not a legal opinion on how the change affects you.
Check this against the source
We summarise developments so they are scannable, which necessarily loses detail. Before you rely on this, read the instrument itself.
Personal Information Protection CommissionFound something out of date on this entry?
Corrections are reviewed against the primary source before anything changes.