The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) is the supervisory authority under the GDPR and the Act, and its GDPR Article 58 investigative, corrective and advisory powers extend to supervising the Act and other supplementary rules; fines may still only be imposed for infringements covered by Article 83.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.