(1) The Secretary of State may by regulations specify, for the purposes of Article 49(1)(d) of the UK GDPR -
(a) circumstances in which a transfer of personal data to a third country or international organisation is to be taken to be necessary for important reasons of public interest, and
(b) circumstances in which a transfer of personal data to a third country or international organisation which is not required by an enactment is not to be taken to be necessary for important reasons of public interest.
(2) The Secretary of State may by regulations restrict the transfer of a category of personal data to a third country or international organisation where -
(a) the transfer cannot take place based on adequacy regulations (see section 17A), and
(b) the Secretary of State considers the restriction to be necessary for important reasons of public interest.
(3) Regulations under this section -
(a) are subject to the made affirmative resolution procedure where the Secretary of State has made
…