The German data protection supervisory authorities have released their take on international data transfers in medical research.