The organisation declares whether it transfers personal information to personal information processors and describes the transfers, identifying the data types transferred and the purpose each serves. Requirement 11 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.