A controller transferring personal data to a third country or international organisation for a law enforcement purpose must ensure the transfer is necessary for a law enforcement purpose; is approved by transfer regulations under section 74AA, made subject to appropriate safeguards (section 75) or based on special circumstances (section 76); and goes to a relevant authority or relevant international organisation, to a processor under a section 59 contract, or, for the competent authorities listed, to another person under the section 77 conditions. Data originally received from an EU member state need that state's authorisation unless the transfer prevents an immediate and serious threat and authorisation cannot be obtained in time, in which case the member state must be informed without delay.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.