; preventing fraud; conducting scientific, historical, or statistical research; or preserving the security and safety of people or property. (2) Transfers to foreign entities Subject to paragraph (3), the prohibition under subsection (a)(2) shall not apply if— (A) the transfer is made only for limited and specific purposes consistent with the consent provided by the individual and with assurances that the recipient will notify the entity providing the data if such recipient makes a determination that it can no longer use the data consistent with such consent; (B) the entity transferring the information determines that the recipient of the information will provide the same level of privacy protection as is required by the entity transferring the information; (C) the entity transferring the information takes reasonable and appropriate steps to ensure that the third party effectively processes the personal information transferred in a manner consistent with the third party’s obligations under the second party’s privacy principles