Per Paraguay Law 6534/2020: lawful basis + consent + notice. Requirements include (a) obtain valid consent of the data subject that is free + specific + informed + with mechanism for withdrawal + (b) recognise lawful basis for processing patrimonial credit information per the Law + (c) provide notice to data subjects covering identity of controller + purposes + categories + recipients + retention + rights + (d) implement special protections for sensitive data + patrimonial information + (e) maintain records of consent + privacy notices + (f) maintain change management for consent and notice updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.