Per PDPA Singapore Notification + Consent + Purpose + Lawful Basis Obligations: establish lawful processing. Requirements include (a) provide Notification to individuals of purposes for which their personal data will be collected + used + disclosed + (b) obtain Consent that is fresh + specific + informed + with mechanism for withdrawal + or rely on exceptions (deemed consent + legitimate interests + other exceptions under the PDPA) + (c) apply Purpose Limitation - personal data must be collected + used + disclosed only for purposes notified to individual or permitted under the PDPA + (d) maintain Legitimate Interests assessment where relied upon as lawful basis + (e) maintain records of notifications + consent + and purpose-specific use + (f) maintain change management for purpose + consent updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.