Personal data must be collected for legitimate, specific and transparent purposes; be correct, valid and secured; be processed lawfully and consistently with the purpose of collection; and not be retained longer than necessary for that purpose. The Executive Regulations specify the policies, procedures and standard criteria for collecting, processing, storing and securing data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.