Controller and processor must involve the DPO properly and in a timely manner in all data protection issues, support the DPO with resources, access to data and processing operations and maintenance of expert knowledge, ensure the DPO receives no instructions on the tasks, is not dismissed or penalised for performing them and reports directly to the highest management level, and ensure other tasks do not create a conflict of interest. Data subjects may contact the DPO, who is bound by secrecy or confidentiality.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.