Article 23(4) and (9) with Implementing Regulation 2026/2083 (applies from 26 March 2027): national contact points exchange data per the requirements catalogue and technical specifications approved by the steering group, keep coding translations and mappings up to date, use the secure network and configuration service, and need steering-group authorisation to start exchanging (test and compliance check without critical findings), to continue after each major release (at least one month before its deadline) and after operational compliance checks (at least every five years); findings require an action plan within 15 working days; significant incidents are notified within 24 hours and reported within one month; as joint controllers they log exchanges, inform data subjects, handle rights requests and notify breaches.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.