Per Peru Law 29733 + Supreme Decree: governance + lifecycle. Requirements include (a) appoint Personal Data Protection Officer or Equivalent Function where required + (b) maintain Records of Processing Activities + (c) implement Retention and Disposal including retention schedules + secure deletion + anonymisation + (d) implement Direct Marketing Restrictions including consent + opt-out + suppression lists + (e) deliver Training and Awareness on Personal Data Protection across personnel + (f) maintain documented governance + accountability framework + (g) integrate with broader privacy + risk programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.