Govern cross-border transfers aligned with GDPR Chapter V + Convention 108+. Transfers permitted to: (a) EU/EEA member states (free transfers post-EU accession); (b) Convention 108+ states (free transfers); (c) countries with adequacy decision (UK + Switzerland + Japan + Korea + Canada commercial + Israel + Argentina + Uruguay + New Zealand + Andorra + Faroe Islands + Guernsey + Isle of Man + Jersey + EU-US Data Privacy Framework 2023); (d) Standard Contractual Clauses (SCC) approved by AZLP + EU 2021 SCC equivalent; (e) Binding Corporate Rules (BCR) approved by AZLP; (f) explicit consent + necessary for contract + vital interests + legal claims. Western Balkans Regional Data Protection Network (WBRDPN) bilateral arrangements with Serbia + North Macedonia + Bosnia and Herzegovina + Albania + Kosovo. Diaspora communities in Italy + Germany + Switzerland + Austria + USA + Canada + Australia + Argentina + Uruguay + Brazil require careful cross-border arrangements particularly for family/inheritance/property matters. Pre-EU accession adequacy assessment ongoing - EU adequacy expected post-accession (~2028 target). NATO partner adequacy considerations. Schrems II Transfer Impact Assessment for US transfers post-CJEU 2020.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.