Controller and processor must designate a DPO where processing is by a public authority or body (except courts acting judicially), where core activities require regular and systematic monitoring of data subjects on a large scale, or where core activities consist of large-scale processing of special category and criminal data; others may, or must where a law requires. A group may appoint one DPO easily accessible from each establishment, and public bodies may share one. The DPO is designated for professional qualities and expert knowledge, may be staff or a contractor, and the controller or processor must publish the DPO's contact details and communicate them to the Agency.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.