Personal information processors are responsible for their processing activities and must take necessary measures to ensure the security of the personal information they process; no organisation or individual may unlawfully collect, use, process or transmit others' personal information, unlawfully trade, provide or disclose it, or engage in processing that endangers national security or harms the public interest.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.