Transfers outside Paraguay, including onward transfers, are allowed only where the destination country, territory, sector or international organisation offers adequate protection, as determined by the National Agency by reasoned decision or an official list. Without adequacy the controller or processor must adopt appropriate safeguards (specific or standard contractual clauses, binding corporate rules, codes of conduct or certification per the regulations). Safeguards are not required for: treaty-based arrangements; international judicial cooperation; intelligence cooperation against terrorism, drug trafficking, money laundering, corruption, trafficking in persons and other crime; transfers necessary for a contract with the data subject (including authentication, service improvement and support, quality monitoring, account maintenance and billing); bank or stock market transfers for the transactions; health prevention, diagnosis or treatment or epidemiological studies with anonymisation; prior, informed, express and unequivocal consent; or where the controller offers guarantees by specific or standard clauses, global corporate rules, or periodically issued seals, certificates and codes of conduct.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.