In all cases, before processing starts, the controller must give the data subject the purposes of processing, the sectors or establishments with which the data will be shared inside and outside the State, and the protection measures for cross-border processing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.