A processor that processes personal information up to the amount the CAC prescribes must designate a person in charge of personal information protection to supervise its processing activities and protection measures, publish that person's contact information and report the name and contact details to the departments with protection duties; under the 2025 compliance audit measures and the CAC's registration platform opened on 18 July 2025 the threshold is more than one million individuals and registration is made on the platform.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.