Personal data may be transferred outside the State in cases approved by the Office where the destination country or territory has personal data protection legislation covering the main provisions, measures and rules protecting privacy and confidentiality and the data subject's ability to exercise rights, with a judicial or regulatory authority able to impose measures on controllers and processors; or where the State has joined a bilateral or multilateral personal data protection agreement with the destination countries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.