A controller or processor caught by Article 3(2) must designate in writing a representative in Montenegro, mandated to be addressed by the Agency and data subjects on all processing issues, unless processing is occasional, does not include large-scale special category or criminal data and is unlikely to result in a risk, or it is a public authority. Designation does not shield the controller or processor from legal action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.