Implement Security Principle 4 + Retention Principle 5 + Data Integrity Principle 6 + 2024 Amendment breach notification regime. Security measures appropriate to harm risk and sensitivity including encryption at rest and in transit + access controls + activity logging + secure development + secure disposal + physical security + supplier security + business continuity + workforce training. PDPC Standards 2015 + amended 2024 prescribe minimum technical organisational measures. Retention only for stated purposes + standard destruction or anonymisation protocols + retention schedule documented. Data integrity through accuracy validation + correction processes + audit trails. NEW under 2024 Amendment (Section 12B new) - Personal Data Breach Notification within 72 hours to PDPC for any breach likely to result in significant harm + concurrent affected data subject notification without undue delay + breach register maintenance + breach response plan + post-incident review. Aligns with EU GDPR Articles 33-34 + Singapore PDPA + Indonesia PDP. CSM CERT-IN coordination for cyber breaches.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.