Processing operations, in particular consultations and disclosures including transmissions, and changes, rectifications and erasures, must be logged so that lawfulness can be monitored and verified; in automated systems logging covers every act of collection or combination. Logs of consultation and disclosure must allow the reason, date and time and, as far as possible, the identity of the person who consulted or disclosed the data and of any recipient to be established. Logs may be used only to verify lawfulness, for self-monitoring, to ensure integrity and security, and for criminal proceedings or national security; they are kept as long as needed and made available to the Commissioner on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.