IMY may fine a public authority for infringements listed in GDPR Article 83(4), (5) and (6), applying Article 83(1) to (3), up to SEK 5,000,000 for Article 83(4) infringements and SEK 10,000,000 for Article 83(5) and (6) infringements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.