Before collecting data from a person, the controller or its representative must inform him or her expressly, precisely and unambiguously (unless already known) of its identity and that of its representative, the purposes, further information such as the recipients, whether answers are compulsory or optional and the consequences of not answering, and the rights of access and rectification, and the characteristics of the CNDP declaration receipt or authorisation. The collection documents must contain this information. When data is collected over open networks, the person must be told that data may circulate on networks without security guarantees and risks being read and used by unauthorised third parties. The information may be given by any means, such as e-mail, paper, notice, electronic form, announcement or interview, with codes and abbreviations explained (Decree Article 34).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.