Draft Law on the Protection of Privacy and Personal Data, cross border transfer

Art. 22 Wet Bescherming Privacy en Persoonsgegevens

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Proposed: draft date not recorded.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

This measure is a draft bill; it binds nobody yet. What follows is what it would require if it is enacted in this form.
Do not transfer personal data to a recipient in a third country unless the recipient is subject to a law, binding corporate rules, or a binding agreement providing a level of protection substantially comparable to this law's processing principles and its own transfer rules, unless an article 6 lawful basis applies or the Commissioner for Personal Data Protection has authorised that specific transfer.
Transfer special categories of personal data or criminal conviction or offence data to a third country only where the recipient is bound by an adequate protection instrument or the Commissioner has authorised the specific transfer, not merely on an article 6 lawful basis.

What it reaches

Obligation class

Transfer

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

This measure is a draft bill; it binds nobody yet, and what follows describes what it would require if enacted in the form read.

Article 22(1) bars a controller or processor from transferring personal data to a recipient in a third country unless the recipient is subject to a law, binding corporate rules, or a binding agreement that offers a level of protection substantially comparable to this law's own processing principles and its rules on onward transfer, or one of the article 6 lawful bases for processing applies, or the Commissioner for Personal Data Protection has authorised that specific transfer.

Article 22(2) narrows that further for special categories of personal data and criminal conviction or offence data, which may only be transferred where the recipient is bound by such an adequate protection instrument or the Commissioner has specifically authorised the transfer, not merely on an article 6 lawful basis.

Article 22(3) lets the Commissioner identify, in accordance with article 31(1)(j), which laws, binding corporate rules or binding agreements offer an adequate level of protection under article 22(1)(a). The bill remains under consideration before De Nationale Assemblee, with no enactment timeline.

When LexLint raises it

crawls_web
trains_models
automated_outreach
processes_biometrics

Read the law

Draft text of the Ontwerpwet Bescherming Privacy en Persoonsgegevens
as republished by SRiS (Stichting voor de Rechtsorde in Suriname), a Surinamese legal-information foundation, not an official government gazette page the bill's current pendency before De Nationale Assemblee is confirmed on the National Assembly's own list of bills under consideration

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app