47.

(1) Where personal data is transferred in accordance with this Part, the entity effecting the transfer shall make it a condition of the transfer, that the data is not to be further transferred to another country or territory without the authorisation of the transferring entity or another competent authority.

(2) A competent authority may give an authorisation under sub- regulation (1) only where the further transfer is necessary for a law enforcement purpose.