On a leak, tampering or loss (or risk thereof) handlers must immediately take remedial measures and notify the authorities and affected individuals, stating the categories/cause/harm, measures taken and mitigations available, and handler contact; notice to individuals may be withheld only if measures effectively avoid harm, subject to authority direction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.