Criminal penalties. Article 222 provides criminal sanctions (fines, and in defined cases imprisonment) for controllers, processors and their agents for specified infringements of the Act.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.