Before disclosing personal information to a party in another jurisdiction, a public body must inform the individual of the purpose, the requester and the foreign data protection authority and obtain consent; with consent it discloses where safeguards are comparable, otherwise refers the question to the Commissioner and, if not comparable, obtains consent to unlimited or limited disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.