Transfer of personal data is allowed if the rights and freedom of the data subject are not violated. With regard to cross-border transfers of personal data the PDPL does not impose any restrictions on the data controller if the foreign country provides adequate protection of personal data.

Where there is no adequate protection of personal data, a cross border transfer is permitted in the following cases:

• The data subject’s consent is obtained
• The transfer is provided pursuant to an international treaty recognized by Tajikistan, or
• The transfer is necessary for the purpose of protecting citizens rights and freedom, health and morality and public order of the state