Controllers must protect personal data with appropriate technical and organisational measures, such as encryption, pseudonymisation, anonymisation, access controls or other prescribed measures, to prevent unauthorised or unlawful processing and loss, destruction or damage.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.