Transfers not covered by adequacy, safeguards, binding corporate rules or the exceptions require the Authority's prior authorisation, with documented compliance; the Reglamento allows it only where a contract binds the recipient to comply with Ecuadorian law and accept the jurisdiction of the Authority and Ecuadorian courts, or binds it to comply where the recipient's country guarantees data subjects' rights, including complaints to a data protection authority and effective judicial protection. In all cases, information on international transfers must be registered beforehand in the National Register by the controller (or processor): the recipient's country, the data categories, the purposes, the recipient's name, the authorised mechanism used and, where applicable, the exception relied on.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.