Per Rwanda Law 058/2021 on Personal Data Protection: scope + lawful basis. Requirements include (a) determine applicability + (b) Lawful Basis for Processing + (c) principles of processing + (d) document applicability + (e) align with NCSA (National Cyber Security Authority).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.