Article 19.11: no Party may prohibit or restrict the cross-border transfer of information, including personal information, by electronic means for the conduct of a covered person's business (covered investments, investors and service suppliers of a Party, excluding financial services persons covered by Chapter 17, which has its own data provision), unless the measure pursues a legitimate public policy objective, is not arbitrary, unjustifiable or a disguised trade restriction, and restricts no more than necessary; treating transfers differently merely because they are cross-border to the detriment of other Parties' suppliers fails the test. For organisations: data localisation or transfer bans by a Party can be challenged state to state; privacy laws with proportionate transfer conditions remain lawful.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.