An agency must implement up-to-date policies and processes that adhere to all provisions of the policy, including when transferring data to other organisations; handle enquiries and feedback on its personal data practices within a reasonable time; publish a privacy statement on its digital services; and let individuals seek clarification through its Quality Service Manager (or equivalent).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.