A transfer of non-public data demands which the transferor PIC and the transferee (if a PIC, or if it results in being a PIC as a result of the transfer) maintain specified information plus the transferee can also be needed to make inquiries to the source of the private data transferred unless the transfer was built in reliance on an exception list