Article 47: the controller (and its representative) keeps a record of processing with its and any joint controller, representative and DPO contacts, purposes, categories of data subjects and data, recipients including abroad, transfers with the country and, for Article 69(2) transfers, the safeguard documents, erasure time limits and a general description of security measures; the processor keeps a record of the controllers served, processing categories, transfers and security measures; records are in writing including electronic form and given to the Commissioner on request. Failing to keep records is fined at 100,000 dinars (Article 95(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.