11. Transfers of Personal Data out of the ADGM*:
11.1 Personal Data shall not be transferred to a country or territory outside ADGM unless that country or territory ensures an adequate level of protection for the rights and freedoms of Data Subjects in relation to the processing of Personal Data.
11.2 The adequacy of the level of protection ensured by laws to which the Recipient is subject, shall be assessed in the light of all the circumstances surrounding a Personal Data transfer operation or set of Personal Data transfer operations, including, but not limited to:
a) the nature of the Personal Data;
b) the purpose and duration of the proposed Processing operation or operations;
c) if the data do not emanate from the ADGM, the country of origin and country of final destination of the Personal Data; and
d) any relevant laws to which the Recipient is subject, including professional rules and security measures.
*Section 4 of the ADGM Data Protection Regulations 2015.