North Macedonia PDPL MKPDP-3 + 4 + 5 + 12 + 15 + Articles 35-46 Governance and Accountability. MKPDP-3 Data Protection Officer (DPO - Oficer za zastita na licnite podatoci) - mandatory designation under Article 41 where: (a) public authorities + bodies; (b) core activities consisting of systematic monitoring on large scale; (c) core activities involving processing of special categories on large scale. DPO must be designated on basis of professional qualities + expert knowledge of data protection law and practices + ability to fulfil tasks (Article 42) + may be employee or external + sufficient resources + reporting to highest management + independence + no conflict of interest + DPO notification to AZLP + DPO contact publication. MKPDP-4 Records of Processing Activities (ROPA - Evidencija za aktivnosti na obrabotka) - controllers and processors must maintain detailed records (Article 35) including categories + purposes + recipients + Cross-Border transfers + retention + security + made available to AZLP. MKPDP-5 Data Protection Impact Assessment (DPIA - Procena na vlijanie vrz zastita na licnite podatoci) - mandatory for high-risk processing (Article 38) + systematic + extensive evaluation + automated decisions + large-scale special categories + public monitoring + AZLP DPIA list. Prior consultation with AZLP for residual high risk (Article 39). MKPDP-12 Privacy by Design and by Default (Articles 33-34) - data protection by design embedded in development + operation + by default minimum necessary data processed + accessible only to authorised personnel. MKPDP-15 Training and Awareness - role-appropriate annual data protection training for all personnel + periodic refreshers + DPO continuing education + Records of Processing Activities awareness.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.