The Privacy Protection Authority is empowered to inspect databases, request information, and issue orders under the PPL and the Data Security Regulations. Database owners must cooperate, provide access to information and personnel, and produce the definition document, risk assessment, audit report, and security event register on request. Obstruction is an offence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.