Parties must not prohibit or restrict the cross-border transfer of information, including personal information, by electronic means when this activity is for the conduct of the business of a covered person, subject to legitimate public policy objectives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.