78 Subsequent transfers
78 Subsequent transfers

(1)     Where personal data is transferred in accordance with section 73, the transferring controller must make it a condition of the transfer that the data is not to be further transferred to a third country or international organisation without the authorisation of the transferring controller or another competent authority.

(2)     A competent authority may give an authorisation under subsection (1) only where the further transfer is necessary for a law enforcement purpose.