Employee personal data processing must rely on contract performance or legal obligation rather than consent (due to imbalance of power). Specific notices required for HR processing, monitoring, and biometric access controls. KVKK Board has issued multiple decisions on workplace monitoring.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.