Processing data on offences, prosecutions, penalties, preventive measures or criminal records is prohibited (outside public bodies). Data revealing racial or genetic origin, religious beliefs, political, philosophical or trade union opinions, or health may be processed only with the data subject's express consent given by any means leaving a written trace, where manifestly public, for historical or scientific purposes, or to protect vital interests; except for health data, such processing needs INPDP authorisation, decided within 30 days (silence is refusal) and possibly with conditions. Breach is an offence punishable by two years and 10,000 dinars.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.