REGULATION ON PROCEDURES AND PRINCIPLES REGARDING DATA TRANSFER SECURITY