Articles 58 to 60 with Decree Articles 45 to 47: when collecting data from the person the controller provides, at the latest at collection, its identity and any representative, the purposes, the categories of data, the recipients, whether answers are compulsory and the consequences of not answering, the right to be removed from the file, the rights of access and rectification, the retention period and any intended transfers abroad; questionnaires must show identity, purpose, compulsory or optional answers and the rights; for indirect collection the information is given at recording or at the latest at first disclosure; persons are told when data collected for another purpose are reused. Exceptions cover State security, defence, public security, sentence execution, crime prevention and important economic or financial State interests.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.