A data controller or data processor ensures that personal data is processed in a fair, lawful and transparent manner; collected for specified, explicit and legitimate purposes and not further processed incompatibly (compatibility assessed on the relationship between the purposes, the nature of the data, the consequences, how the data was collected and the safeguards, with archiving in the public interest, scientific, historical research and statistical purposes deemed compatible); adequate, relevant and limited to the minimum necessary; retained no longer than necessary for the lawful basis; accurate, complete, not misleading and where necessary kept up to date; and processed with appropriate security against unauthorised or unlawful processing, access, loss, destruction, damage or any breach. Controllers and processors use appropriate technical and organisational measures to ensure confidentiality, integrity and availability, owe a duty of care in respect of processing and must demonstrate accountability for the principles.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.