Article 31 restricts public sector bodies, data intermediation service providers and recognised data altruism organisations from transferring or granting access to protected non-personal data held in the Union to third-country authorities / parties unless: (a) an international agreement (treaty / MLAT) is in place; (b) safeguards equivalent to those in Article 31(2) are in place; (c) the cumulative conditions of Article 31(3) are met (necessity, proportionality, specificity, judicial authorisation, narrow purpose). The competent authority reviews requests; customers must be informed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.