Per Panama Law 81: establish lawful basis + obtain valid consent + provide notice. Requirements include (a) obtain valid consent that is free + specific + informed + unambiguous + with mechanism for withdrawal + (b) recognise alternative legal bases per the Law including legal obligation + contract performance + vital interests + public interest + legitimate interests where applicable + (c) provide notice/privacy policy to data subjects covering identity of controller + purposes + categories + recipients + retention + rights + transfer + (d) implement special consent for sensitive personal data + (e) maintain records of consent + privacy notices + and processing purposes + (f) maintain change management for consent and notice updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.