Executive Regulation of the Personal Data Protection Law — Article 38

Before an overseas transfer, the Controller must ensure the foreign Processing entity provides adequate protection no lower than the level required by the Law and Regulation.

Interpretation and application must be checked against the official Arabic text and the current version.