Per Panama Law 81 + Executive Decree 285: accountability + processor management. Requirements include (a) maintain processor obligations + contracts ensuring processors process only on documented instructions + maintain security + assist with rights + breach notification + (b) appoint Data Protection Officer (DPO) or equivalent where required with defined responsibilities + (c) maintain Records of Processing Activities including purposes + categories + recipients + retention + safeguards + cross-border transfers + (d) implement supplier + processor + sub-processor due diligence + ongoing oversight + (e) maintain confidentiality duty across personnel handling personal data + (f) maintain processor audit and review programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.