A controller carrying out wholly or partly automated processing operations must notify the Commission when the automated processing becomes the sole basis for making decisions about a data subject that would significantly affect them, giving the purpose, categories of personal data and of data subjects, consent forms or the manner of obtaining consent, recipients, storage period, the methods and logic of the automated processing, the decisions to be made on the basis of the processed data or that would significantly affect the data subject's rights and freedoms, and the officer's contact details; and no decision with legal effects concerning a data subject may be made solely on the basis of automated processing without the data subject's consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.