The controller and every person who learns of personal data in the course of their functions must respect professional secrecy on the terms of the criminal law, even after ceasing those functions, without affecting obligations to provide information under the law applicable to the files or general law. A controller, processor or person handling data who, even by negligence, causes or facilitates misuse or fraudulent use of data or communicates it to unauthorised third parties commits an offence (Article 61).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.