Per Australian Privacy Principle (APP) 1 + Accountability: open transparent management of personal information. Requirements include (a) implement APP 1 - manage personal information in an open and transparent way + (b) maintain a clearly expressed and up-to-date APP Privacy Policy describing how personal information is handled + (c) maintain Accountability and Privacy Management Framework with documented governance + roles + processes + (d) maintain Records of Processing including data flows + purposes + recipients + retention + (e) integrate with broader Australian Government Information Security Manual (ISM) + Notifiable Data Breaches scheme alignment + (f) maintain OAIC (Office of the Australian Information Commissioner) engagement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.