Recognising that each Party may have its own regulatory requirements on electronic transfers of information, a Party must not prevent the cross-border transfer of information by electronic means where the transfer is for the conduct of a covered person's business. A Party may still adopt or maintain an inconsistent measure it considers necessary for a legitimate public policy objective (necessity decided by that Party), if not applied as arbitrary or unjustifiable discrimination or a disguised restriction on trade, or any measure it considers necessary to protect its essential security interests, which other Parties may not dispute. Cambodia, Lao PDR and Myanmar were not obliged to apply the rule for five years after entry into force, extendable by three years if necessary, and Viet Nam for five years.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.