The organisation certifies that it knows and complies with the requirements of the jurisdiction governing the collection and collects personal information by fair means, without deception, directly or through third parties acting for it. Requirement 7 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.