In addition to the Article 17 matters, a processor processing sensitive personal information must notify the individual of the necessity of processing it and the impact on the individual's rights and interests, except where notice is not required under the Law.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.