Communication or transfer of personal data abroad is prohibited where it may harm public security or Tunisia's vital interests (two to five years' imprisonment and up to 50,000 dinars, attempts included); otherwise a transfer is allowed only to a country ensuring an adequate level of protection, assessed on the nature of the data, purposes, duration, the destination and security precautions, and in every case only with INPDP authorisation, decided within one month (the family judge for a child's data). Transfer without authorisation is an offence (one year and 5,000 dinars).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.