Final Transfers to Another Country or Territory (f) Before transferring personal data to another country or territory, the organisation should either obtain the consent of the individual for the overseas transfer or take reasonable steps to ensure that the receiving organisation will protect the personal data consistently with these Principles. Retention (g) An organisation should cease to retain documents containing personal data, or remove the means by which the personal data can be associated with particular individuals as soon as it is reasonable to assume that the retention is no longer necessary for legal or business purposes. Accountability (h) An organisation should be accountable for complying with measures which give effect to the Principles. (i) An organisation should, on request, provide clear and easily accessible information about its data protection policies and practices with respect to personal data in its possession or under its control. An organisation should also make available information on how to contact the organisation about its data protection policies and practices. Implementation 7 Recognising the different levels of development of the Participants, a Participant may delay the application of this Framework until such time that it is ready to implement it by informing the other Participants in writing. 8 The Participants may undertake joint activities to strengthen cooperation and collaboration in the area of personal data protection which could include the following activities: (a) Information sharing and exchange; (b) Workshop, seminar or other capacity building activity; and (c) Joint research in areas of mutual interest. Page 4 of 6