The Act applies where processing takes place in Ecuador; where the controller or processor is domiciled in Ecuador; where a controller or processor not established in Ecuador processes data of residents of Ecuador in connection with offering them goods or services (paid or not) or monitoring their behaviour in Ecuador; and where a contract or public international law makes Ecuadorian law applicable. The Reglamento requires a controller or processor without domicile in Ecuador to appoint a special attorney (apoderado especial) resident in Ecuador with authority to appear on its behalf before administrative and judicial bodies, unless its processing is occasional, excludes large-scale processing of the special categories of Art. 25 and is unlikely to create a risk to people's rights and freedoms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.