An organisation must inform the individual of the purposes of collection, use or disclosure on or before collecting the personal data, of any other purpose before using or disclosing for it, and on request of the business contact information of a person able to answer questions about the collection, use or disclosure; when collecting from another organisation without consent it must give that organisation sufficient information about the purpose to let it determine whether disclosure is lawful; notification is not required where consent is deemed under section 15 or 15A or an exception under section 17 applies, but an organisation must still notify the purpose of managing or terminating an employment relationship.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.