Article 31: controllers and processors (or representatives) keep the GDPR 30 record unless the 30.5 exemption applies, which may be organised around structured data sets and must specify activities by purpose; any addition, change or removal is communicated to the DPO; the public bodies listed in Article 77.1 publish an electronically accessible inventory of their processing activities with the GDPR 30 information and its legal basis.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.