Where processing is likely to result in a high risk to data subjects' rights and freedoms by its nature, scope, context and purposes, the controller or processor must assess its impact before processing, in particular for systematic and extensive automated evaluation including profiling that produces legal or similarly significant effects, large-scale processing of special categories, large-scale systematic monitoring of publicly accessible areas, and other processing requiring consultation with the Office. The assessment contains a systematic description of the operations and purposes (including any legitimate interest), a necessity and proportionality assessment, a risk assessment, and the measures, safeguards and mechanisms to address the risks and demonstrate compliance; where appropriate the views of data subjects are sought.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.