For the processing of personal data the owner of the data bank adopts technical, organisational and legal measures that guarantee its security and prevent alteration, loss, unauthorised processing or access; the requirements and conditions data banks must meet for security are set by the National Authority (the Reglamento articles 46 to 58 and the Authority's security directive), save special provisions in other laws; processing personal data in data banks that do not meet those requirements and conditions is prohibited.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.