The competent authority, controllers and processors must establish appropriate mechanisms for confidential reporting of infringements of the Law. A person reporting an infringement in good faith to the Agency, the competent authority or another authorised body must not suffer retaliation, discrimination or unfavourable treatment, and the reporter's identity is protected unless disclosure is necessary for proceedings or required by law, without prejudice to whistleblower protection law. Failing to establish the mechanisms is a misdemeanour under Article 89.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.