The owner or operator must take technical and organisational measures that guarantee protection of personal data, including prevention of accidental or unauthorised destruction, loss, unlawful interference and alteration; the protection requirements are set by the competent executive authority.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.