A data controller and data processor keep a record of all personal data breaches comprising the facts relating to each breach, its effects and the remedial action taken, in a manner that enables the Commission to verify compliance with section 40; breaches not notified are recorded as well as those notified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.