Per Pakistan PDPB 2023 Clauses 13-15: cross-border transfer + localisation. Requirements include (a) restrict cross-border transfer of personal data except where conditions are met including adequacy determination + appropriate safeguards + explicit consent + necessity for contract/legal obligation/vital interests + (b) maintain localisation of Critical Personal Data within Pakistan per the Bill + (c) implement adequacy assessment for cross-border transfer destinations per NCPDP determination + (d) implement appropriate safeguards including binding corporate rules + standard contractual clauses + certification + (e) document cross-border transfer flows + safeguards + (f) maintain records for regulator inspection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.