Establish lawful basis per GDPR Article 6(1) supplemented by UAVG national provisions including: UAVG Article 22 (processing of national identification numbers limited to specific purposes), UAVG Article 30 (processing of special categories with consent or specific national grounds), UAVG Article 31 (processing of criminal conviction data), UAVG Article 32 (processing for journalistic + academic + artistic + literary purposes). Document the specific lawful basis at processing-activity level with reference to both GDPR and UAVG provisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.