Designate, train and raise the awareness of those responsible for protecting personal data. (The 2021 text also required that anyone collecting or handling personal data, including contractors, be trained, and contractual safeguards on affiliates and third parties.)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.