Fiduciaries may transfer personal data outside India unless the Central Government restricts the destination via notification (blacklist approach). Transfers must still meet local Act requirements, and sector-specific laws (like RBI?s payment data rules) may impose stricter conditions.
