The controller of personal credit data must ensure that the technical, organisational and security measures needed to safeguard access to and integrity of personal data are adopted and implemented, so as to prevent alteration, loss, consultation, commercialisation or unauthorised access. Article 21(i) makes collecting, storing or transmitting third parties' data through insecure mechanisms that do not guarantee security and inalterability an infraction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.