Failing to adopt the technical and organisational measures appropriate to apply data protection principles effectively from the design stage, and failing to integrate the necessary safeguards into the processing, is an infraction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.