Controllers, processors and everyone involved in any stage of collecting, processing, storing, using or circulating data for credit purposes must keep them secret unless a competent authority requires disclosure by court order; the duty survives the end of the person's functions and extends to recognised users or subscribers of a credit information company, who must keep absolute confidentiality over the history they access. Secrecy does not apply to requests from (a) the Central Bank of Paraguay and its supervisory bodies, (b) the competent judge in proceedings to which the data subject is a party, with safeguards for confidentiality, (c) the Comptroller General for a specific person under an ongoing audit or asset verification, formally requested, (d) the head of the tax undersecretariat and the customs directorate for a specific taxpayer under verification, formally requested, (e) the Attorney General and prosecutors within their powers, and (f) the anti-money-laundering secretariat within its powers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.