Articles 57 and 58: controllers and processors involve the DPO properly and in time in all data protection matters, give the resources, access and training needed, ensure independence, do not penalise or dismiss the DPO for performing its tasks, and have the DPO report to top management; data subjects may contact the DPO; the DPO keeps confidentiality and may do other work without conflicts; its minimum tasks are to inform and advise, monitor compliance including allocation of responsibilities, awareness and training and audits, advise on DPIAs, and cooperate with and be the contact point for the Commissioner, having regard to risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.