Article 109 imposes professional-secrecy on competent authorities, NBs and other persons involved, with carve-outs for cooperation between authorities + publication of data through EUDAMED. Article 110 confirms that the GDPR + Regulation (EU) 2018/1725 apply to personal-data processing under MDR. Article 111 governs personal-data processing in EUDAMED. Article 113 covers Member-State penalty regimes. Article 116 (note: Articles 115/116 in some renumbered versions) requires Member States to ensure that manufacturers + AR + importer + distributor have sufficient financial coverage (insurance or equivalent) for civil liability for damages caused by devices.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.