Anyone who processes personal data must protect its confidentiality even after the end of their occupational or contractual relationship (Law 41); Public Entities discipline employees who breach the Law (Law 39).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.