Every public institution must publish a privacy policy on its website and other digital platforms of collection (Annexure B is a sample), and every ministry, department and agency must place the data protection function in a department or unit under the CEO's office with a designated officer of proven knowledge to advise on compliance, monitor it, assign responsibilities, raise awareness and train staff, and liaise with NITDA. Public institutions must also comply with the Guidelines for the Management of Personal Data by Public Institutions 2020.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.