122 No. 3 of Conditions for Crossborder transfer of personal data 2021] Data Protection 71. (1) Personal data other than personal data categorised in accordance with section 70(2) may be transferred outside the Republic where— (a) the data subject has consented and (i) the transfer is made subject to standard contracts or intragroup schemes that have been approved by the Data Protection Commissioner; or (ii) the Minister, has prescribed that transfers outside the Republic is permissible; or (b) the Data Protection Commissioner approves a particular transfer or set of transfers as permissible due to a situation of necessity. (2) The Minister may, by statutory instrument, prescribe the criteria for cross border data transfers under subsection (1)(a)(ii) where the Minister considers that — (a) the relevant personal data shall be subject to an adequate level of protection, having regard to the applicable laws and international agreements; and (b) the enforcement of data protection laws by authorities with appropriate jurisdiction is effective. (3) The Data Protection Commissioner shall monitor the circumstances applicable to data that has been transferred outside the Republic under subsection (1)(a)(ii)in order to review decisions made under this Act. (4) Despite subsection (2), personal data may be transferred outside the Republic— (a) in case of an emergency, to a particular person or entity engaged in the provision of health services or emergency services; (b) where the data subject has explicitly consented to that transfer of sensitive personal data; and (c) to a particular international organisation or country which complies with subsection (1)(a)(ii), where the Data Protection Commissioner is satisfied that the transfer or class of transfers is necessary for any class of data controllers or data subjects and does not hamper the effective enforcement of this Act. (5) The Data Protection Commissioner shall approve standard contracts or intra-group schemes under subsection (1)(a) where