The regulatory framework includes provisions related to the assignment and/or transfer of personal data