When a program collects, uses or discloses personal information for data matching, the organisation ensures authority exists, enters an information sharing agreement or arrangement for it, verifies that the notice or consent states the information will be used for matching, and verifies that the personal information bank says so. The GC discussion defines data matching as comparing personal information from different sources for administrative or other purposes, systematically or periodically. No enhancements. Not allocated to the medium-profile baseline.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.