Before starting any processing the controller must inform the individual of the controller's details and of any other party processing for it or to be used by it; the lawful purposes for which the controller or another party wants to process the data; a comprehensive and accurate description of the processing activities and the levels of disclosure of the data for those purposes, or failing that a general description; and any other information necessary to fulfil the conditions of processing. The NCGAA Privacy Notice guideline (PDPPL-02050213E) sets the expected content of a public privacy notice.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.