Failing to notify the rectification or erasure of personal data or the restriction of processing (k), and failing to tell the data subject on request which recipients received the rectified, erased or restricted data (l), are infractions; the Law states the duties only in this form, and failing to erase a deceased person's data when required (m) is a further infraction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.