Procedures cover purpose limitation, pseudonymisation methods and criteria, adequacy review, the ban on re-identification and response if it occurs; pseudonymisation is at a level that prevents identification without additional information; combination with another controller's pseudonymised data goes through a designated combination or data expert agency; additional information is deleted or kept separately with records and technical, administrative and physical safeguards; a suitable processing period is set and the data destroyed when it ends; and anonymisation reaches a level where individuals cannot be identified with reasonable time, cost and technology (PIPA Articles 2, 28-2 to 28-5, 28-7 and 58-2).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.