A B/D considers de-identifying the personal data its systems collect, process, store, archive and disclose so that data subjects cannot be identified from processed results without defeating the business purpose. The level is set on a risk basis, from pseudonymisation to anonymisation, using techniques such as generalisation, randomisation, tokenisation or synthetic data, with a privacy impact assessment to confirm compliance and residual risk, and privacy by design built into system design as far as possible.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.