Where a breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller must notify affected subjects without undue delay using clear and plain language.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.