A data consumption purpose is provided for every data sharing agreement involving sensitive data, specifying the type of data needed and, for complex international organizations, the country or legal entity scope. Automation opportunities: record access tracking for sensitive data; enforce capture of purpose, for instance integrated with model governance; alert owners or governance teams when an existing access is used for an additional use case; recognize technologies such as machine learning and use usage and cost tracking to highlight possible new uses. Certification test steps: confirm the catalog exists and scanning recurs; report assets with and without purpose tracking and identify sensitive assets with no purpose; create a new consumption use case and confirm a sharing agreement is generated with a workflow to complete purpose tracking that is accurate and consistent with the agreement; change the purpose of an existing use and confirm the agreement is flagged for review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.