Article 73: access bodies give access under a permit only through a secure processing environment that restricts access to the persons listed in the permit, minimises unauthorised reading, copying, modification or removal, limits data input and changes to a few identifiable persons, uses individual unique identities and confidential access modes, keeps identifiable access and activity logs (access logs at least one year), and monitors the measures; only non-personal data, including anonymised statistics, may be downloaded after review; environments are audited regularly including by third parties with corrective action; recognised data altruism organisations using such environments meet the same measures; the Commission sets detailed requirements by implementing act due 26 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.