Apply data protection and privacy by design principles to government services, including data minimisation, purpose limitation, retention controls, and Data Protection Trustmark or equivalent assurance where applicable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.