Personal data may be processed only under the procedures and principles of this Law or other laws, and processing must comply with five principles: lawfulness and fairness; accuracy and being kept up to date where necessary; processing for specified, explicit and legitimate purposes; being relevant, limited and proportionate to those purposes; and retention only for the period laid down in the relevant legislation or needed for the purpose.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.