Data must be destroyed when the retention period set in the declaration, authorisation or special laws expires, when the purposes are achieved, or when no longer useful, recorded in a report drawn up by a bailiff (huissier de justice) in the presence of an expert designated by the INPDP, at the controller's cost; data communicated or communicable to public bodies may be destroyed only after their opinion and INPDP authorisation. Breach is an offence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.