Security breaches are loss or unauthorised destruction; theft, misplacement or unauthorised copying; unauthorised use, access or processing; and unauthorised damage, alteration or modification. The controller informs data subjects without delay of breaches that significantly affect their property or moral rights once the breach is confirmed and an exhaustive review of its magnitude has begun, stating at least the nature of the breach, the data compromised, recommended protective measures, the corrective actions taken immediately and where to obtain more information; it must analyse the causes and implement corrective, preventive and improvement measures to prevent repetition.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.