Per Peru Law 29733 + Supreme Decree + Law 32200 (2024 amendments): breach notification + enforcement. Requirements include (a) implement Personal Data Breach Notification to ANPD per statutory timeline + notify affected data subjects where high risk + (b) operate Security Incident Response Procedures including detection + triage + containment + recovery + lessons learned + (c) maintain ANPD Inspection Cooperation including responding to inquiries + facilitating audits + (d) implement Compliance Monitoring including periodic review + internal audit + reporting to leadership + (e) maintain sanctions awareness including administrative penalties + civil liability + (f) maintain breach log + incident response + tabletop exercises.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.