Provide PII privacy notice per Section 4.1 + Privacy Act 1974 + e-Government Act 2002 + OMB Circular A-130 + agency System of Records Notice (SORN) covering: authority + purpose + routine uses + disclosure + retention + Privacy Act statement on collection forms. Obtain consent where required. Establish lawful basis for processing (statutory + regulatory + contractual + consent). Apply Fair Information Practice Principles (FIPPs) including transparency + individual participation + purpose specification + data minimisation + use limitation + data quality and integrity + security + accountability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.