In every case where the breach would prejudice the privacy and confidentiality or security of a data subject's personal data, the controller must notify that data subject and tell them the measures taken, within the period and under the procedures the Executive Regulations set.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.