Requires the controller to notify the Commissioner of a personal data breach without undue delay (and within the prescribed time), and to communicate the breach to affected data subjects where it is likely to result in a high risk to their rights and freedoms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.