Per Portugal Lei 58/2019 implementing GDPR: scope + lawful basis + Portugal-specific supplements. Requirements include (a) determine GDPR + national law scope including extraterritorial application + sectoral specifics + (b) establish Lawful Basis per GDPR Article 6 + Article 9 for special categories + national derogations + (c) maintain Lawful Basis Register and Documentation + (d) provide Privacy Notices in Portuguese per national requirement + (e) document applicability + lawful basis + (f) align with CNPD (Comissao Nacional de Proteccao de Dados) guidance + national derogations + supplements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.