A company may, based on its managerial needs, entrust personal data to other companies for processing, provided that it has established a contract of consignment binding on the consignee company, in such a way as to ensure the security and confidentiality of the data to be processed. Where such consignment incurs the transfer of personal data outside the MSAR, the transferring company must notify or apply to the PDPB for approval.