Transfer of personal data of any kind to countries or international organisations that do not provide adequate levels of protection under international or regional standards is prohibited, except for international judicial cooperation under a treaty, exchange of medical data required by the data subject's treatment or public health, banking or stock-exchange transfers under their legislation, agreements under international treaties to which Uruguay is party, and intelligence cooperation against organised crime, terrorism and drug trafficking; a transfer may also be made where the data subject unequivocally consented, it is necessary for a contract with the data subject or pre-contractual measures at their request, for a contract in the data subject's interest between the responsible party and a third party, for an important public interest or the exercise or defence of a right in judicial proceedings, to safeguard the data subject's vital interest, or from a register legally intended to inform the public; and the URCDP may authorise a transfer or series of transfers to a country without adequate protection where the responsible party offers sufficient guarantees, which may derive from appropriate contractual clauses (registered under Decreto 414/009).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.