North Macedonia PDPL Articles 10-13 + 19-21 Lawful Basis for Processing. MKPDP-1 Lawful Basis - all processing must rest on one of the six lawful bases: (1) consent of the data subject; (2) performance of contract; (3) compliance with legal obligation; (4) vital interests; (5) public interest task; (6) legitimate interests not overridden by data subject fundamental rights and freedoms. Consent must be freely given + specific + informed + unambiguous + given by clear affirmative action + withdrawable + verifiable for children below age 14 with parental consent (lower than GDPR default 16). MKPDP-9 Transparency and Privacy Notices - data subjects must receive transparent + concise + intelligible + easily accessible information at the point of collection (Articles 19-21) including identity + contact details of controller + DPO + purposes + legal basis + recipients + Cross-Border transfer destinations + retention + ARCO rights + AZLP complaint avenue + automated decision-making information. Privacy notices required in Macedonian language + Albanian (minority language) + accessible to data subjects with disabilities. MKPDP-17 Direct Marketing and Consent - direct marketing communications must respect lawful basis + opt-in consent for electronic marketing + opt-out at every communication + Telecommunications Law coordination + Electronic Communications Law + soft-opt-in for similar products from same controller. Purpose Limitation + Data Minimisation + Accuracy + Storage Limitation + Integrity and Confidentiality + Accountability principles.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.