Individuals have the right to know the purpose of collection and who the data may be passed to and to have personal data collected lawfully, fairly and not excessively (DPP1), to accurate data not kept longer than necessary (DPP2), to use only for the original or directly related purpose unless they expressly and voluntarily consent (DPP3), to protection against access, processing, erasure, loss or use that is unauthorised or accidental (DPP4) and to information on policies, data held and purposes (DPP5). Data is processed in ways that benefit the individual or community, with a demonstrable vetting process where the organisation benefits most, control over highly consequential uses through consent and access where possible and accountability processes where not, and clear communication of how, why, where and when customer data feeds AI systems, with minimal collection and processing and retention policies observing the PD(P)O and its guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.