Section 37 of the Irish Data Protection Act establishes regulation-making powers for the purposes of Articles 49 (5) of the GDPR. Article 49(5) GDPR allows Member States for important public policy reasons to set limits on the transfer of specific categories of personal data to a third country or international organization. Public policy reasons in this context could, for example, relate to possible detriment to individuals arising from transfer of their personal data to a third country or international organization. No such limits have been set yet.