Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) 5(3): Article 5(3): data sufficient and limited to what the purpose needs

Other controls in Articles 4 to 6: lawful processing, processing controls and consent – Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)

4 Article 4: no processing without consent unless a listed case applies
5(1) Article 5(1): fair, transparent and lawful processing
5(2) Article 5(2): specified purpose and compatible further processing
5(4) Articles 5(4) and 5(5): accuracy, updating and correcting or deleting wrong data
5(6) Article 5(6): data kept securely against breach and unauthorised processing
5(7) Article 5(7): no retention after the purpose is exhausted, except anonymised
6(1) Article 6(1): valid consent that the controller can prove
6(2) Article 6(2): withdrawal of consent at any time

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.