Per Russia Federal Law on Personal Data (152-FZ): scope + principles. Requirements include (a) determine scope per Article 1 + (b) apply key definitions per Article 3 + (c) apply processing principles per Article 5 (legality + purpose limitation + adequacy + accuracy + retention limitation + (d) document applicability + (e) align with Roskomnadzor (RKN) + Federal Service for Supervision in the Sphere of Communications guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.