Where certified services process personal information of Korean data subjects, the provider shall comply with PIPA obligations on lawful basis, data minimisation, retention limits, data subject rights, and cross-border transfer restrictions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.