s.16: where a personal data breach occurs, the data controller must, without undue delay and in any event within 5 days of becoming aware, notify the Ombudsman and any affected data subject.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.