Article 44: a controller or processor caught by Article 3(4) designates in writing a representative in Serbia, unless the processing is occasional, does not involve large-scale special-category or criminal data, and is unlikely to create a risk, or the controller is a public authority; the representative is the point of contact for data subjects and the Commissioner on all processing matters, without shielding the controller or processor from complaints or claims. Failure to appoint is a misdemeanour fined at 100,000 dinars (Article 95(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.