The organization should determine and document the countries and international organizations to which personal data may be transferred.
States and international organizations to which personal data can be transferred under normal circumstances must be communicated to the data subjects.