Audit trails are the registered, analysable records of events in an information system (access, input, amendment, erasure and sending of data). Where a controller must keep audit trails, they are to be kept no longer than one year after the entry unless law or the nature of processing requires otherwise. A controller that no longer holds the audit trails containing requested information may decline to provide that Article 15 information, and is not required to keep audit trail information solely to answer data subject requests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.