The second-layer information must be easy to reach, for example as a full information sheet at a central point (reception, information desk, cashier) or a poster, and the sign must refer clearly to it, ideally also through a digital source such as a QR code or website. It should be available non-digitally too and reachable without entering the monitored area (a link or a telephone number), and in whatever form it must contain everything Article 13 requires.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.