Every public body must prepare a privacy impact assessment in the Commissioner's form for any proposed enactment, system, project, programme or activity likely to substantially affect personal information, submit it for approval, make recommended amendments and follow it to avoid unnecessary intrusion.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.