Any person that holds personal information in electronic form must use all means to protect it with security safeguards that are reasonable in the circumstances against loss, access, use, modification, leak or disclosure, except with the permission of the owner of the information or another party authorised by law. This is the only general personal data security duty in Cambodian law in force; breach is punishable by one to two years' imprisonment and a fine of 2 to 4 million riel (Article 60), doubled for a legal entity (Article 65).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.