Article 10 requires Member States to designate or certify dispute-settlement bodies that can resolve disputes between data holders and data recipients about Article 8 + Article 9 + Article 13 compliance. The dispute-settlement bodies operate alternatives to court, are independent and impartial, and decide within 90 days. Article 11 permits data holders to apply appropriate technical protection measures (TPMs) to prevent unauthorised access and use of data, but those TPMs must not impede the lawful Article 4 / Article 5 / Chapter III access regimes. Article 11(3) imposes sanctions on parties using data in breach of agreed conditions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.