Regulated agents are subject to ANPD inspection and must, among other duties: supply copies of physical or digital documents, data and information relevant to assessing their processing, in the time, place, format and conditions the ANPD sets; allow access to premises, equipment, applications, systems, tools and technological resources, and technical and operational documents and data, whether held by them or by third parties; let the ANPD know the information systems used for processing and their traceability, updating and replacement; submit to audits carried out or ordered by the ANPD; keep documents, data and information for the periods set by law and regulation and throughout any administrative proceeding that needs them; and make available, when requested, a representative able to support the ANPD with knowledge and autonomy to provide data and information. The agent must ask for confidentiality of commercially sensitive information; digitised documents must meet Decree 10.278/2020; failure to comply may constitute obstruction of inspection, which is a serious infraction under the dosimetry regulation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.