A controller of a database not subject to registration that holds information of special sensitivity on more than 100,000 persons must notify the Authority within 30 days of the controller's identity and contact details, the DPO's details where one is required, and a copy of the database definitions document, and notify within 30 days any change of controller or DPO, any change requiring an update of the definitions document, and cessation of the database.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.