The organisation appoints one or more qualified individuals, with qualifications suited to its processing, responsible for overall compliance with data protection and the Global CBPR Privacy Principles as described in its privacy statement, and implements timely procedures to receive, investigate and respond to privacy complaints with an explanation of remedial action. (Qualification of the individual added in the updated set.) Requirement 40 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.