After the INPDP's one-month opposition period, data subjects must be informed in advance, by registered letter or any written means at least one month before processing, of the nature of the data, purposes, whether answering is compulsory and the consequences of not answering, the recipient and who has access, the controller's identity and representative, their rights of access, withdrawal and opposition, the retention period, a summary of security measures and any country of intended transfer. Failure is an offence (two years and 10,000 dinars).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.