Where a breach is likely to result in high risk to rights and freedoms of data subjects, controllers must notify affected individuals with remedial measures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.