Assure all stakeholders that, whatever the practice or technology, it actually works as it says it will, which others can check independently, and that its parts and workings stay open to view for both the people served and those providing the service (trust but verify). Visibility and transparency underpin accountability and trust; the principle tracks all the fair information practices, but for audit the emphasis falls on three: accountability (collecting personal information brings a duty of care; responsibility for all privacy policies and procedures is documented, communicated and assigned to a named individual, and equivalent protection is secured by contract or other means when information goes to third parties); openness (information on policies and practices for managing personal information is readily available to individuals); and compliance (complaint and redress mechanisms exist and are communicated, including how to reach the next level of appeal, and adherence to privacy policies and procedures is monitored, assessed and checked).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.