Where personal data stored by the provider is improperly disclosed and the disclosure or access harms a large number of users, notify CITRA, the users and law enforcement bodies as soon as possible and in any case within 72 hours. (The 2021 text set 24 hours for this notice; the 2024 text moved the general breach notice to CITRA to 24 hours in Article 6.1.)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.