Outsourcing of personal credit information processing requires written contract with prescribed terms, prior data subject notification, FSC reporting where applicable, supervision of the outsourcee, and inclusion of outsourcing scope in regulatory filings.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.