Notify Autoriteit Persoonsgegevens (AP) of personal data breaches per GDPR Article 33 within 72 hours via online breach notification portal (Datalek Meldformulier). Notify affected data subjects per GDPR Article 34 where high risk. Document all breaches in internal register per GDPR Article 33(5). Conduct international data transfers per GDPR Chapter V using adequacy decisions + 2021 EU Standard Contractual Clauses + Binding Corporate Rules approved by AP + Schrems II Transfer Impact Assessments + EU-US Data Privacy Framework (where applicable). UAVG Article 41 provides additional national export restrictions for specific data categories.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.