When the departments with protection duties question parties, consult and copy contracts, records and account books, conduct on-site inspections or inspect and, with approval, seal or seize equipment related to unlawful processing, the parties must cooperate and assist and may not refuse or obstruct; where a department finds relatively high risks or a security incident it may interview the legal representative or principal person in charge or require the processor to engage a professional institution to audit its processing, and the processor must take measures to rectify and eliminate the risks as required; suspected crimes are transferred to the public security organs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.