“For those categories of data which can be stored/ mirrored abroad, companies would have to ensure that adequate safeguards are in place at the specified