Public legal entities covered by the Access to Information Law must process personal data to serve their public purpose, in pursuit of the public interest, to execute legal competences or duties of the public service, provided they publish the cases in which they process personal data, with clear and current information on the legal provision, purpose, procedures and practices, in easily accessible media, preferably their websites, and appoint an encarregado. Deadlines and procedures for data subject rights before public bodies follow the Habeas Data, Administrative Procedure and Access to Information laws. Notary and registry services run privately by delegation are treated as public bodies and must give the public administration electronic access to data; state companies competing in the market are treated as private entities, but as public bodies when operationalising public policies. Data must be kept in interoperable, structured formats for shared use in public policies, public services and public access to information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.