The competent authority shall ensure that the transfer is necessary for the purpose of this Regulation and that the third country does not transfer the data to another third country unless it is given express written authorisation and complies with the conditions specified by the competent authority of the Member State .