Keep records of processing activities containing: (4.1) the name and contact details of the provider, its representative if outside Kuwait and the data protection officer; (4.2) the purposes of processing; (4.3) a description of the categories of data owners and of other personal data; (4.4) transfers of personal data outside Kuwait where needed, naming the country; (4.5) a general description of the technical and organisational security measures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.