Tanzania Personal Data Protection Act 2022 S31: Transfer to adequate countries only when necessary, after evaluating the need

Transfers to a country with an adequate legal framework are allowed where the recipient shows the data is needed for a public-interest task or the controller's lawful functions, or shows necessity with no reason to think the subject's interests will suffer; the controller must first make a provisional evaluation of necessity, the recipient must keep the necessity verifiable, and the controller must ensure the recipient uses the data only for the transfer purpose. The Commission may prohibit a transfer.