Are there Rules for Data Transfer?

Under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 there are strict requirements for transferring data from databases within Israel to locations outside of Israel. Such transferring is permitted only if a legal basis for the transfer exists, including, for example, (i) the law of the destination country ensures a level of protection no lesser, mutatis mutandis, than the level of protection of data provided for by the Israeli laws; (ii) the consent of the data subject; or, (iii) transfer of data to countries which receive data from the EU Member States under the same terms of acceptance. In addition, the recipient of the data must warrant that it takes adequate measures to ensure the privacy of the individuals and that the data will not be transferred to any other person.