The head of a public body must include in personal information banks all personal information used for administrative purposes or retrievable by name or identifier; information may be shared with other public bodies only under an agreement in the manner the Commissioner prescribes; and data matching requires the Commissioner's prior written authorisation (decided within 60 days on public importance, benefits, public interest and scale).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.