The competent authority or body designated in each Member State issues, renews and withdraws the European Disability Card under national rules, procedures and practice, and keeps the personal data it collects and stores for that purpose secure, intact, authentic and confidential. The issuing authority is the controller under the GDPR and is responsible for the processing; engaging external service providers does not remove any liability of the Member State under Union or national law for breaches of personal data obligations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.