They have to be authorised by the DPA in each Member State from which the multinational wishes to transfer data.
Seda peab lubama andmekaitseasutus igas liikmesriigis, kust hargmaine äriühing soovib andmeid edastada.