Article 43: controllers must inform the AEPD or regional authority, before the transfer, of any transfer relying on compelling legitimate interests under the last subparagraph of GDPR 49.1, and inform data subjects of the transfer and the interests pursued; this does not apply to public authorities exercising public powers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.