Articles 77 to 80: the Commissioner, an independent authority, supervises the Law and may order information, inspect, access all data, premises and equipment, warn, reprimand, order compliance with requests or the Law within a set time, order breach communication, impose temporary or permanent limitations or bans, order rectification or erasure and notice to recipients, withdraw certificates, suspend transfers, and issue a misdemeanour order imposing a fixed fine during inspection; it drafts SCCs, gives prior-consultation opinions, approves codes, clauses and BCRs; its acts are subject to court review. Competent authorities must provide confidential internal channels for reporting breaches of the Law (Article 80).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.