Article 53: where a breach is likely to result in a high risk to individuals, the controller informs the data subject without undue delay in clear and plain language of the nature of the breach and the Article 52 details, unless it had applied measures such as encryption making the data unintelligible, has taken later measures so the high risk is no longer likely, or individual notice would involve disproportionate effort, in which case a public communication is used; the Commissioner may order notification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.