The level of data protection in the foreign country or international organization referred to in item I of the lead sentence of Art. 33 of this Law shall be evaluated by the national authority, which shall take into consideration:
I – the general and sectorial rules of legislation in force in the receiving country or international organization;
II – the nature of the data;
III – the compliance with the general principles of personal data protection and data subjects’ rights as provided in this Law;
IV – the adoption of security measures as provided in regulation;
V – the existence of judicial and institutional guarantees for respecting the rights concerning personal data protection; and
VI – other specific circumstances relating to the transfer.