Adds Article 6(1)(ea), processing necessary for a recognised legitimate interest listed in Annex 1 (disclosure to a public body for its task, national and public security and defence, emergencies, crime, safeguarding vulnerable individuals) with no balancing test, extends the Article 21 right to object to it, gives direct marketing, intra-group administrative transfers and network and information security as examples of legitimate interests, and lets a basis in relevant international law (2018 Act section 9A and Schedule A1) support Article 6(1)(e), 9(2)(g) and 10 processing. The duties are on the UK GDPR leaves cross-referenced here.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.