Disclosures to controllers and transfers to processors are made to fulfil the original collection purpose or a compatible or related one, with the organisation showing for each data type how the disclosure serves the purpose (for example order fulfilment). Requirement 12 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.