The DPO must check the controller's or processor's compliance with the Decree-Law, its Executive Regulations and the Office's instructions, and in particular: verify the quality and correctness of the procedures in place; receive requests and complaints about personal data; give technical advice on evaluation and periodic examination of personal data protection and intrusion prevention systems, document the results and recommend improvements, including risk assessment procedures; act as the link with the Office; and carry out any further tasks the Executive Regulations add. The DPO must keep confidential the information received in performing these duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.