Implement the eight foundational Personal Data Protection Principles under LFPDPPP Article 6. (1) Licitud (lawfulness) - lawful basis for processing. (2) Consentimiento (consent) - tacit consent default + express consent for financial/asset data + written consent for sensitive data. (3) Informacion (notice) - mandatory Aviso de Privacidad. (4) Calidad (data quality) - accuracy + completeness + currency. (5) Finalidad (purpose) - specified explicit and lawful purposes. (6) Lealtad (loyalty/good faith) - no deceptive or fraudulent means of collection. (7) Proporcionalidad (proportionality/minimisation) - adequate + relevant + not excessive. (8) Responsabilidad (accountability) - controller responsibility to demonstrate compliance + appropriate safeguards even when sub-processing + Officer for Personal Data designation. Aviso de Privacidad (Article 16) mandatory in Spanish + Integral (full) + Simplified (medium) + Short (printed) formats + INAI Lineamientos del Aviso de Privacidad 2013 amended 2024. Sensitive data (Article 3 Section VI) including racial/ethnic + present/future health + genetic + religious/philosophical/moral beliefs + union affiliation + political opinions + sexual preference. Minors under 18 require parental consent (Article 9).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.