Appropriate safeguards

24. For the purposes of section 22, appropriate safeguards may be provided for by

(a) a legally binding and enforceable instrument between public authorities;

(b) binding corporate rules in accordance with section 25;

(c) standard data protection clauses prescribed by the Commissioner with the approval of the Minister;

(d) contractual clauses authorised by the Commissioner between the data controller or data processor and the data controller, data processor or the recipient of the personal data; or

(e) provisions, authorised by the Commissioner, to be inserted into administrative arrangements between public authorities which include enforceable and effective data subject rights.