[nexa] new framework for commercial transfers of personal data.