Personal data information systems, including those existing before the Law, must be registered with the competent executive authority, and personal data may not be collected or processed in an unregistered system except in the Article 3.2 cases. Registration is not required for systems holding state secret data, systems for data on persons in employment relations with the owner or operator or needed for their admission to work premises, and systems exempted by the authority according to purpose and a maximum number of subjects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.