Per Panama Law 81: restrict international data transfer. Requirements include (a) restrict transfer of personal data to countries that do not provide adequate level of protection except where conditions are met including data subject consent + necessity for contract/legal obligation/vital interests + appropriate safeguards (standard contractual clauses + binding corporate rules + codes of conduct + certification) + (b) document transfer impact assessments where appropriate + (c) maintain inventory of cross-border data flows + recipients + safeguards + (d) implement contractual protections with processors + sub-processors involving international transfer + (e) maintain records for regulator inspection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.