The organisation indicates the measures it uses to ensure compliance with the Global CBPR Privacy Principles (internal guidelines or policies, contracts, compliance with sector laws, self-regulatory codes, other) and maintains records of its processing activities that demonstrate compliant processing and can be produced on request. (Records of processing added in the updated set.) Requirement 39 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.