Transfers of personal data to foreign states may be carried out provided that the receiving state ensures adequate protection of rights of data subjects. Transfers to states without adequate protection require consent or other specified grounds.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.