Article 4(1) confirms that, where data cannot be directly accessed under Article 3, the data holder shall make readily available data accessible to the user without undue delay, easily, securely, free of charge, in a comprehensive, structured, commonly used and machine-readable format, and, where relevant and technically feasible, of the same quality as is available to the data holder. Article 4(13) prohibits data holders from using non-personal product data to derive insights about the user's economic situation, assets and production methods, or about the user's use of the connected product in any other way that could undermine the commercial position of the user on the markets on which the user is active.
This control maps to 3 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.