Overseas transfers rest on separate consent after full notice or on another lawful ground such as certification or recognition; where overseas processing or storage is needed to perform a contract with the data subject, the required items are notified properly; a transfer contract covers legal compliance and protection; and the measures needed to protect the data are taken (PIPA Articles 28-8 to 28-11; Regulation on the Operation of Overseas Transfers).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.