Public administration files are created, modified or removed only under the civil service and access-to-information laws (Article 37); the instrument must state the purpose and intended uses, the persons concerned and whether supply is optional or compulsory, the collection and updating procedure, the file's basic structure and data types, disclosures and planned transfers or interconnections to third countries, the responsible bodies, the units where access, rectification, cancellation and opposition can be exercised, and the security measures with their required level (basic, medium or high); a removal instrument states the file's destination or destruction. Data collected by one administration may be communicated to another for its functions, and the tax administration's disclosures need no consent (Article 39).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.