Article 17 with Decree Article 22: no prior formality is needed for processing outside the Law's scope (Article 3), for processing whose sole purpose is keeping a public register open to consultation, and for processing by non-profit religious, philosophical, political or trade-union bodies limited to members and not disclosed to third parties; the exemption does not relieve the controller of the Law's principles and data subject rights.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.