A transfer is allowed where the recipient is in a country, territory, sector or international organisation that the Commissioner has decided ensures an adequate level of protection, by a decision published in the Official Gazette. The Commissioner weighs data protection legislation and its implementation, the rule of law and human rights, national security, public order and criminal legislation, effective data subject rights and independent supervision with enforcement powers and remedies, and international commitments, and must monitor developments and revise its decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.