48. A transferring entity may enter into a written agreement with the recipient of personal data, which shall contain provisions relating to—
(a) unlimited access by the transferring entity to ascertain the existence of a robust information system of the recipient for storing the personal data; and
(b) the countries and territories to which the personal data may be transferred under the contract.
