When entering into a contract that may involve accessing or requiring sensitive personal information from one thousand or more individuals, an agency must require the contractor and its employees to register their personal information processing system with the Commission and to comply with the Act, including the section 23 access requirements, in the same manner as agencies and government employees.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.