The controller must process personal data honestly and legitimately; consider the controls related to designing, changing or developing products, systems and services that involve personal data processing (privacy by design and by default, NCGAA guideline PDPPL-02050208E); take appropriate administrative, technical and financial precautions to protect personal data as determined by the Competent Department; and apply the privacy-protecting policies developed by the Competent Department and issued by ministerial decision.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.