The act imposes obligations on organizations to ensure, to the extent that the information is exchanged or sent to a country such as the United States, that individuals are informed of the fact that their information may be subject to the laws of another country.