Per Paraguay Law 6534/2020: governance + accountability. Requirements include (a) maintain Records of Processing and Database Registration with the supervisory authority where required + (b) maintain Processor Obligations and Contracts ensuring processors process only on instructions + maintain security + assist with rights + breach notification + (c) maintain Confidentiality Duty across personnel handling personal data with appropriate confidentiality undertakings + (d) implement supplier + processor + sub-processor due diligence + ongoing oversight + (e) cooperate with the supervisory authority including providing information + facilitating audits + (f) maintain documented governance + accountability framework.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.