Personal data collected or prepared for processing may be transferred to, stored in or shared with a foreign country only where that country's level of data protection or security meets or exceeds the Law's requirements and a licence or permit has been obtained from the Centre, under the policies, criteria and rules the Regulations set for cross-border transfer, storage, sharing, processing, disclosure and protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.