Article 41.02

A data controller or data processor shall record the basis for transfer of personal data to another country under subsection (1) and the adequacy of protection under Section 042 of this Act.