The organization must make sure that temporary files produced while processing personal data are wiped or destroyed within a documented time limit, under documented procedures, and must check regularly that temporary files no longer in use have been removed within that limit. It should recognise that such files include rollback journals and files generated by database updates and by applications running; that they serve no purpose once the task that created them is finished; that some cannot be removed straight away; and that their lifespan is not always predictable, so a clean-up procedure should find them and establish how long ago each was last used.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.