When systems are decommissioned or media replaced, residual personal data must be securely erased. Regulation 7 requires that disposal methods render data irrecoverable. Decommissioning of databases must be reflected in the database register and the definition document withdrawn or archived. The PPA must be notified of dissolution of a registered database.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.