Liechtenstein DSG Articles 40-49 International Data Transfer (transposing GDPR Chapter V Articles 44-50). Transfer of personal data outside EEA permitted only where: (a) destination jurisdiction provides adequate level of protection (DSS follows EU Commission adequacy decisions list - automatic recognition of EU/EEA + UK + Switzerland + Andorra + Argentina + Canada (commercial) + Faroe Islands + Guernsey + Isle of Man + Israel + Japan + Jersey + New Zealand + South Korea + Uruguay + USA via EU-US Data Privacy Framework 2023); (b) appropriate safeguards including 2021 EU SCCs (Decision 2021/914) + BCRs DSS-approved via consistency mechanism + Codes of Conduct + Certification; (c) derogations including explicit informed consent + performance of contract + public interest + legal claims + vital interests + register-based + limited transfers. Liechtenstein-Switzerland data flows special arrangement: as part of Liechtenstein-Switzerland Customs Union (1923) + Currency Treaty (1980) + Liechtenstein adopts Swiss financial law in many respects + however Liechtenstein DSG is GDPR-aligned (EEA-EU acquis) while Switzerland nFADP (revised Federal Act on Data Protection 2023) is independent regime + Swiss-Liechtenstein cross-border flows facilitated by EU Switzerland adequacy decision (recognised by EEA). Schrems II Transfer Impact Assessment + supplementary measures for non-adequate destinations + EU-US DPF 2023 Adherence Lists + Article 47 BCR approval procedure via DSS to EDPB. Articles 48-49 onward transfers + flow-down requirements + Banking Act + Customer Due Diligence Act cross-border financial data exchange + FATF + OECD tax-information exchange agreements + CRS (Common Reporting Standard) automatic exchange + FATCA US-Liechtenstein IGA + Liechtenstein-EU TIEA (Tax Information Exchange Agreements).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.