The controller must keep a special record of personal data containing the controller's and the data protection officer's details, a description of the categories of personal data, the persons authorised to access it, processing times, limitations and scope, the mechanism for erasing, modifying or processing the data, the purpose, any data on cross-border movement and processing, and the technical and organisational security and processing measures; the record must be given to the Office on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.